NSC Technologies, LLC experienced a Business Email Compromise (BEC) incident on March 2, 2017. An external actor spoofed the CEO's email address and directed the payroll department to send employee W-2 forms. The request was identified as fraudulent moments after the data was sent. The breach exposed employees' names, addresses, Social Security Numbers, and 2016 income/withholding information. NSC notified law enforcement, the FTC, and the IRS, and provided one year of identity theft protection to affected employees.