State employees fooled by a fake payroll website farming their data

The Office of the Comptroller is investigating a "credential harvesting campaign" that involved the state's employee self-service time and attendance system, resulting in compromised personal data.

Michael Sangalang, chief communications officer for the comptroller, stated, "We are still trying to determine how many employees were affected... Many recent direct deposit account changes were in fact legitimate..."

The state has alerted all potentially impacted employees, and various departments will issue paper checks to those with recent direct deposit changes as a precaution.

Despite the cyberattack, the state assures employees that payroll will not be affected and emphasizes that the official timekeeping system remains intact.

Read at Boston.com