Some workers at U.S. Bank had their stolen identities used to file fraudulent tax returns through human resources software firm ADP, according to cybersecurity blogger Brian Krebs.
About 2 percent of U.S. Bank’s more than 67,000 employees had their tax and salary data stolen, discovered when thieves used previously stolen data to register accounts in their names, a bank spokesman told CNBC. The bank has been investigating the weakness in its W-2 portal since April 19, the bank told employees in a letter obtained by Krebs.
