Payroll holds the highest-value data set in most organizations: Social Security numbers, dates of birth, home addresses, bank account and routing numbers, compensation for every employee, and — through garnishment orders, disability arrangements, and leave records — information that is medical-adjacent and legally protected.
It is also targeted by two attacks that are cheap to attempt, highly effective, and specifically designed around how payroll departments work. Both are ...