An employee with Ellwood Thompson’s Local Market fell victim to an email phishing scam this week, inadvertently releasing sensitive information about employees who work at the Carytown grocer. The information became public after a concerned worker contacted NBC12’s investigative team, as you can read about below.
More than 350 employees at Ellwood Thompson’s specialty grocery store have fallen victim to a phishing scam, where their sensitive identity information has been compromised.
Management at Ellwood Thompson’s confirmed Thursday that a human resources employee was deceived by an email, requesting the W2 forms for employees. The worker believed the store’s owner was behind that email.
The email was, however, a scam. That worker released the W2 forms for all 2016 employees at the stores in Richmond and in Maryland, according to a letter sent to employees.
Ellwood Thompson’s also publicly released a statement regarding the matter, which can be read in full below:
Ellwood Thompson’s recently fell victim to a phishing scam that resulted in the inadvertent disclosure of internal personnel information. As a small, locally owned and independently operated business, we are committed to our employees and our customers. The moment we became aware of this issue, we immediately notified affected employees and legal counsel, and began working with all parties to respond to this incident.
We immediately notified the proper authorities, and are holding storewide meetings to inform our staff and address questions regarding the incident. Ellwood Thompson’s is taking every appropriate action to resolve this incident as quickly as possible. In addition, we are providing free credit monitoring and identity theft protection for one year to all current and former employees affected by this breach.
Ellwood Thompson’s is deeply committed to our employees. Accordingly, we recently became a Benefit Corp., joining a small group of companies leading the way to hold for-profit corporations accountable to social consciousness and environmental responsibility. This is a legal designation that enables mission-driven companies like Ellwood’s to stay mission driven and do it’s best to serve genuine human needs. In recent years, we also have introduced a higher minimum wage, free health insurance, a profit-sharing program, a 401K plan and maintain a positive work environment to better serve our employees and customers.
We have no reason to believe any customer information has been breached.