Payroll records with employees’ personal information have become targets for identity thieves.
If your business experiences a data breach that involves employees’ personal identity information or tax-related data exposures, you are required to notify both the Virginia Attorney General’s Office (OAG) and the affected employees as soon as possible.
See the OAG’s Database Breach Notification Requirements for details.
Send all payroll data breach notifications to:
Computer Crime Section
Virginia Attorney General’s Office
202 North 9th Street
Richmond, VA 23219
You should also notify us immediately if you think any payroll records have been compromised by calling 804.404.4232.
When you call, be prepared to provide the following:
- Name of the company
- Federal Employee Identification Number (FEIN) and Virginia State Tax Account number, if available
- Date the breach occurred
- How many employees were affected
- What type of information was compromised
- Contact information–phone and email
Once the OAG receives your notification, we will work together with your business to determine what further action is needed.
For more information, call the Attorney General’s Computer Crime Section at 804.786.2071, Monday–Friday, 8:30 am–5 pm.
To learn about ways to avoid data theft, see “Start with Security: A Guide for Business” on the Federal Trade Commission’s website.