I talk about https://haveibeenpwned.com/ in several different courses throughout the year. It is a great resource and provides concrete examples of how extensive many breaches are. Troy has done a blog post talking about the state of the site now that there are one million subscribers. It’s worth a read and there are some interesting statistics.
The IRS has recently warned about continued phishing attacks targeting W-2 tax documents. This is a variation of the CEO-scam in which the attacker attempts to sway a subordinate into revealing information under the pretense of the CEO. I spoke with on Good4Utah’s morning show about this scam. The main tip is to file your refunds quickly. If you suspect you have been the victim of this scam, you need to notify the IRS immediately. You can find steps at https://www.identitytheft.gov. Brian Krebs has additional information on this.