Renovate America, Inc. disclosed an email spoofing attack on January 20, 2017, where an attacker impersonated the CEO to request employee W-2 forms. Employee W-2s containing names, addresses, SSNs, and wage information were sent to the fraudulent account. The company discovered the fraud within hours, contacted the FBI and IRS, and offered 24 months of identity protection via Experian. No network compromise occurred.