Trust exploited in widespread ongoing phishing operation

Infiltration of a single user’s email in a phishing attack between May 8 and May 9 allowed threat actors to compromise individuals’ names, addresses, Social Security numbers, contact information, financial account details, health information, passports, and driver’s licenses.