<prompt> Human: Hi Everyone,As stated in the title, I recently learned that some extremely gifted individual in my companys HR department emailed every employees W-2 to someone impersonating a company executive about 200 employees have likely been affected by this. The company has acknowledged the issue and has offered each employee 2 years of complimentary credit monitoring. My questions for everyone here are:1. Besides signing up for the credit monitoring, what else should I be doing to protect my identity?2. 2 years of free credit monitoring is nice, but is that really long enough? Someone who clearly knows how to profit from this kind of information now has my name, address, annual income, and social security number which could cause some serious issues for me further down the road. 3. What is the extent of my companys liability here?I really appreciate any and all help!TL;DR: HR leaked all employee W-2s to scammers. What do I do now?Assistant: You have no idea how many tickets Ive worked in the past month dealing with this exact issue. Follow the already mentioned advice and keep an eye on your finances. Maybe file a police report for identity theft just to have something on file to protect your credit score down the road. In my experience, its fairly common that the phisher has amassed a large number of stolen identities and they sit on them for month or sells them off months later. You may not notice anything suspicious occurring until several months from now.Human: All good advice. You may not notice anything suspicious occurring until several months from now.This is exactly what Im afraid of.  <response>: If you know your SSN is compromised I would report it ASAP. After that every year the IRS will send you a letter with your personal identification number to file tax. Without this number, no one can file under your name. 