Estimated read time: 1-2 minutes
This archived news story is available only for your personal, non-commercial use. Information in the story may be outdated or superseded by additional information. Reading or replaying the story in its archived form does not constitute a republication of the story.
ST. GEORGE — A St. George company is settling in a class-action lawsuit after a 2018 data breach put its employees’ sensitive tax information at risk.
Mettekjistine Mckenzie of Arizona and Chasity Combs of Kentucky filed a class-action lawsuit in April 2018 on behalf of the 1,854 former and current employees affected by the breach.
According to court documents, Allconnect released an email to employees informing them that their W-2 tax information was affected by the 2018 data breach. Allconnect said it hadn’t discovered the breach until “over a month after it occurred” in another email sent days later. The breach reportedly occurred after a February 2018 “email spoofing attack.”
In its statement, Allconnect said an individual pretending to be the company’s president emailed a human resource employee requesting “all 2017 Allconnect employee W-2 information.”
The Allconnect employee sent the unknown cyber criminals a data file that contained copies of W-2 statements or all of the sensitive personally identifying information needed to fill out a W-2. The stolen data included names, addresses, Social Security numbers and wage information for every W-2 employee who worked at Allconnect during 2017.
Read the full article at St. George News.
