The University of Virginia has confirmed that personal information of more than 1,400 employees was jeopardized by a “phishing” email scam.
The Daily Progress reports (http://bit.ly/1OM5BAR ) that the FBI recently notified the university of the exposure after an extensive investigation. The FBI said suspects are in custody.
U.Va. said it has notified the affected employees and is offering them one year of free credit monitoring and identity protection services.
The scam targeted several U.S. colleges and universities. Emails were sent asking recipients to click on a link and provide network access system usernames and passwords. The perpetrators gained access to a component of a human-resources system and accessed W-2s for about 1,400 employees and direct deposit banking information of 40 employees. The university has more than 20,000 employees.