Late Wednesday Feb. 1, the Corsicana ISD Superintendent Dr. Diane Frost was alerted to an email that was sent from her school email account to another school district employee requesting personal information for employees in the district. The email response included 2016 employee names, social security numbers and earnings. Corsicana ISD quickly learned it was the latest victim of a data seeking scam.
This scam, some have referred to as “phishing,” is designed to solicit personal information by posing as someone known to the recipient. In this case, the criminal was posing as the Superintendent requesting the information.
Ironically, the next day the Internal Revenue Service (IRS), state tax agencies and the tax industry issued an alert to all employers that the form W-2 phishing scam has evolved beyond the corporate world and is spreading to other sectors including school districts, tribal organizations and non-profits.
“CISD takes the privacy and security of our employees very seriously,” said Dr. Diane Frost. “We have notified the local police, Federal Bureau of Investigation (FBI) and the Internal Revenue Service/Criminal Investigation. The district is providing free credit monitoring services for 24 months to all employees affected,” said Frost. “As with many other districts also affected by this cybercriminal activity, we are looking at our procedures to ensure this incident does not happen again.”
“I am deeply sorry for any inconvenience and worry this incident may have caused our staff,” Frost said.