NAMPA, Idaho — Officials of Amalgamated Sugar Co. say a computer security breach led to the release of the personal information of many of its employees.
The breach resulted from a so-called “spear phishing” email. The hacker sent an email posing as Amalgamated President and CEO John McCreedy requesting copies of the employee data from a corporate employee, according to a Feb. 22 press release.
Amalgamated officials said they learned of the breach within hours and notified local law enforcement, the office of the Idaho attorney general, the State Tax Commission, the FBI and the IRS. Letters have been sent to affected employees. Amalgamated will cover the costs of credit monitoring and identity theft protection services through Lifelock for them.
There’s been no indication that the culprits have sought to use any of the data, according to the press release.
McCreedy said the company is examining its protocols and implementing measures to prevent a future breach.