Oakwood Athletic Club Lafayette, California

ClubSport San Ramon and Oakwood Athletic Club disclosed that an employee fell victim to a phishing email appearing to be from an executive, resulting in the unauthorized disclosure of employee W-2 information, including names, addresses, Social Security numbers, and wage/tax data. The incident was discovered on July 31, 2017. The company notified law enforcement and the IRS, and offered 12 months of identity protection services via Experian.