81K people's sensitive info feared stolen from Hilb after email inboxes ransacked

Hilb Group has warned more than 81,000 people that around the start of 2023 criminals broke into the work email accounts of its employees and may have stolen a bunch of sensitive personal information. The financial biz handles property, casualty, and employee benefits insurance and advisory services at more than 130 locations …

[Dan 55]

Who sends their "credit card numbers, security codes, SSNs, passwords, PINs" to/from an employer's email account?

The most that should be sent is credit card numbers, security codes, passwords, or PINs belonging to the employer, and it wouldn't be the employee's problem if anything happens to them.

[Doctor Syntax]

Who leaves stuff like that on the servers irrespective of whose servers they are?

[Anonymous Coward]

Cyber Security – 5 Steps to Mitigate Your Cyber Risks

‘The first cyber security policy was written in 1997. Then, about 10 years ago, the policies started gaining in popularity and became standard coverage in any risk transfer program. You don’t need to do too much research to find out why – open any newspaper or Google “cyber attack” and read about the latest corporation, municipality, or governmental organization that was hacked.’