<prompt> Human: So someone in our company fell for a phishing email and sent out 2016 W-2 information for the entire company they didnt send actual W-2s, the information that was leaked includes name, SSN, and 2016 earnings. So now everyone who received a W-2 for last year is a potential identity theft victim. Awesome right?I am not particularly worried about my tax refund getting stolen since I filed my taxes and received my refund about a month ago. However I still filled out IRS form 14039 as a precaution. Mainly what I am worried about is having fraudulent credit cards, loans, or bank accounts opened in my name. Luckily, the fraudster didnt get personal addresses or DOBs but that info could probably be found via the interwebs pretty easily. Also, our company is providing a credit monitoring service to all employees for the next 2 years for free, which is awesome. Basically I am just wondering what other precautions should I take. Should I put a freeze on my credit reports or is that overreacting for this situation? Am I at a big risk for having accounts opened in my name or am I just worrying too much?Edit: so Im going to place a freeze on my credit reports. Should I be worried about my bank accounts at all? I have 1 credit card, and a checkingssavings account, as well as a retirement plan through my work, are any of these at risk? Only my SSN got leaked but I just want to cover all the bases, should I also contact my bank or something or should I just keep an even closer eye on my accounts?  <response>: Freeze credit with all bureaus immediately.Request an Identity Protection Pin from the IRS for tax filing immediately.You cannot change your SSN. Require written promise from the employer for lifetime credit monitoring and identity theft insurance or you will sue them. I suggest getting co-workers to agree to this collectively as well. If you get screwed 2 years and 1 day after the free 2 years of monitoring ends, your employer will give you nothing, despite their negligence being the cause. 