<prompt> Human: As the title says, our HR rep sent all of our tax info in the form of W-2s to a scammer parading as our company president. I dont know why or how, but he didnt question it or call to confirm before sending.Regardless of how it happened, what can I and other employees do to protect ourselves? Im miffed that the higher-ups havent yet notified us directly. Time is of the essence here. The standing IT guy was saying Theyll just sweep it under the rug. Hes the type where you cant quite tell if hes joking. I hope he was.I already went ahead and changed my bank passwords and submitted a fraud alert to the credit bureaus. What kind of future am I looking at in terms of preventing future fraud, now that my info is floating around out there? Am I going to have to maintain some kind of fraud alert or monitoring for life?Edit: My apologies folks! I was trying to go all meta with my title and refer to a similar post in the recent past which featured someones HR falling for the same scheme. This is the first time that my HR rep has released info like this--that we know of.One more edit: My supervisor just showed me this IRS web page. The third quoted scam email was in the email to our HR rep, word for word: I want you to...Kindly prepare... to me asap.Its definitely not how the president writes his emails... Pretty spooky.Aaand another edit: Its 2pm CT. No official word yet from the company higher-ups. As someone commented below, its understandable that they have to get their ducks in a row I think I said ducks in order before...Im bad with colloquialisms before approaching all of us. At the same time, its bothering the hell out of me that were still in the dark. Im credit freezing as we speak. Will update when I hear something!And another: Just wanted to follow up now that the work day is over. No word officially. I was called down to my managers office for what I was hoping to be a discussion on the events detailed here, but it turned out to be a meeting to discuss a potential client that has historically been known by others to be difficult, unclear, and not really worth my time. Basically, they sat down with me to warn me about a future job that wouldnt be a good fit. Even though in the back of my mind, I was like, What are you people going to do about this breach that no ones mentioned yet?!, when it comes to my actual job and its duties, they were looking out for me.Now, I dont want this to sound like some sappy story in order to back up the fact that my company is a good company to work for, but I do believe that. So I wont be suing anyone but will be doing my best to protect myself with the tips in comments below.Ill give it another day, but after that... !!!Edit showing things have gotten all too real: I was just be-bopping around my Facebook tonight and saw that my coworker was getting pestered by Facebook profiles with one friendone pic. Those are apparently a textbook sign of someone sitting behind the fake profiles trying to add people in order to obtain your full birthday. Im pretty sure this coworker is somewhat aware of the mistakes that have been made by HR, but not the full extent, but I warned him to NOT add any of these fake people and why. I havent been bombarded with requests, and I dont think I ever had the year listed to even my friends, but its definitely hitting home what is happening to all of us. This will definitely be evidence of our collective identity theft. I suppose I should try to go to bed now... At least my doors are locked?Thank you all for the feedback!Assistant: Again? How does this person still have a job? In HR no less. I cant imagine this is a sweep it under the rug mistake, but that person definitely needs to be relieved from their position. Human: My apologies! I tried to go all meta and make a reference to a post I remember seeing on rPF about a month or so back that where an HR rep gave away some data to a phisher, but the post wasnt taken too kindly if I remember correctly. A mistake as big as this seems like it would warrant some major discipline, if not dismissal, I would agree. I shudder to think they would actually sweep it under the rug, how sketchy is that? which is why Im getting in contact with my familys lawyer.  <response>: What post was that? I am unfortunately in the same boat. 