A new email scam is targetting administrators in the payroll department of Western Washington schools. A press release from Capital Region Educational Service District 113, which serves 44 school districts including ours, warns human resources/payroll staff who have access to sensitive W2 and payroll information.
The senders present themselves as the school district’s superintendent, with a message like one the following:
•”I need W-2 copy list of “all Employees wage and tax statement for 2017. Kindly prepare and attach the lists in PDF file type and email them to me for review as soon as possible.”
•”Kindly send me the individual 2017 W-2 (PDF) and earnings summary of all W-2 of our company staff for a quick review.”
•”Can you send me the updated list of employees with full details (Name, Social Security Number, Date of Birth, Home Address, Salary).”
Kristen Jaudon, Director of Communications and Public Engagement, warns in the press release “If any district staff receive an email from the superintendent requesting a list of employees and other personal information, they should check it out before responding.”
Jaudon also gave information in case someone did fall for the trick, “If someone responds and it is determined the request was not legitimate, the district needs to notify anyone who is at harm from the data release, not more than 45 days after the error was discovered. If the data breach affects more than 500 Washington residents, the Attorney General’s office must be notified.”
ESD 113 provides services for 44 school districts, one tribal-compact school and approved private schools in Thurston, Mason, Lewis, Grays Harbor and Pacific counties.