KALAMAZOO, Mich. — Kalamazoo College says an unknown person got access to its employees W-2 forms from 2015.
The school doesn’t know who is behind the “spear phishing” attack, but they said whoever is responsible sent a carefully designed email that looked like it was from an administrator at the college.
The email asked for copies of all W-2 forms from the 2015 tax year and was successful in getting those copies. Those copies include names, addresses, Social Security numbers and salary information of employees at the college in 2015. However birthdays, bank account numbers and other sensitive information was not disclosed.
Kalamazoo College notified the FBI and IRS. They, along with Michigan State Police will investigate who is behind the email.
In the meantime, a formal letter with more information on the incident will be sent to affected current and former employees at the school. Information on credit monitoring and identify theft resolution services will be in those letters.
