GreatBanc Trust Company, serving as ESOP trustee, experienced an email phishing attack during the week of October 23, 2017. An unauthorized third party accessed one of GreatBanc's email accounts and created a folder to redirect wire-transfer-related emails. An email account review determined personal information (name, address, date of birth, and/or SSN) of plan participants was contained in the account. Notification letters were sent in June 2018. Remediation included 2FA implementation and staff training.