Manager on Call LLC Discloses Phishing-Driven W-2 Data Breach Affecting Five Individuals Human resources consulting firm Manager on Call LLC reported a data breach on May 28, 2026, stemming from a sophisticated email phishing attack that exposed sensitive W-2 tax information of employees. The incident was disclosed to the attorneys general of New Hampshire and South Carolina on May 29, 2026, with five affected individuals identified four in New Hampshire and one in South Carolina. The breach occurred when a threat actor used display name spoofing to impersonate Manager on Call CEO Cristina Heta, sending a fraudulent but urgent request to the company’s staff operations team. Believing the email was legitimate, contractors bypassed secure data transfer protocols and sent W-2 files directly to the attacker. Exposed data included full names, home addresses, 2025 wage details, and Social Security numbers, heightening risks of tax fraud and identity theft for those impacted. The company confirmed that the breach was an isolated social engineering incident, with no compromise of its internal mail servers or client databases. In response, Manager on Call is offering complimentary credit monitoring and identity theft restoration services through Experian to affected individuals. Notifications were sent on May 28, 2026, with a follow-up email containing enrollment details for the service. Those with questions can contact the CEO directly or reach the company via phone or email.