Sacramento, View of California State Capitol from 10th Street. (Andre m via CC BY-SA 3.0)
A California state agency was victimized by a phishing incident last week in which an employee clicked on a link that provided access to the employee’s account for some 24 hours.
During that time, the attackers allegedly stole social security numbers and sensitive files on thousands of state workers and then sent targeted phishing messages to at least 9,000 other state workers and their contacts, according to a report by KrebsOnSecurity.
The attack happened on the California State Controller’s Office (SCO) Unclaimed Property Division from March 18 to March 19.
In an announcement issued by SCO, officials said the improperly accessed email account was discovered promptly and access removed. SCO personnel in the Unclaimed Property Division immediately began a review of all emails in th ..
Support the originator by clicking the read the rest link below.
