Criminals Are Now Calling Employees Then Showing Up to Steal Data

What Happened

Cybercriminals have launched a sophisticated campaign targeting U.S. businesses by combining phone scams with physical break-ins. Attackers first call employees pretending to be IT support staff, then actually show up in person to steal company data. This escalation from digital-only attacks to physical intrusions marks a concerning shift in how criminals operate.

The Details

Here's how this attack works. A criminal calls an employee, claiming to be from the IT department or tech support team. They create urgency by saying there's a security problem that needs immediate attention. The caller might ask the employee to share login credentials, disable security features, or provide information about office access.

The real danger comes next. Using information gathered from these phone calls, attackers then physically visit the business location. They may pose as repair technicians, contractors, or even fellow employees. Once inside, they steal laptops, access computers left unlocked, or plug in devices to extract data directly from the company network.

This combination is particularly dangerous because it exploits two weaknesses at once: our tendency to trust helpful voices on the phone and our assumption that people in our physical workspace belong there. Many businesses have strong digital defenses but weaker physical security protocols, especially in hybrid work environments.

Who Is Affected

This threat primarily impacts employees who work in office settings or hybrid arrangements. If someone in your household has access to work systems, company data, or office buildings, they could be targeted. Remote workers are especially vulnerable because home offices often lack the physical security measures of corporate buildings.

Small and mid-sized businesses face heightened risk. These organizations may not have dedicated security staff or formal verification procedures for IT support calls. Family members who own businesses, manage teams, or handle sensitive company information should pay close attention to this threat.

What You Should Do Right Now

1. Talk with working family members about verification procedures. Before anyone shares information with IT support callers, they should hang up and call the IT department directly using a known number from the company directory.

The Bigger Picture

This attack represents a troubling evolution in social engineering tactics. Criminals are becoming more patient and sophisticated, willing to invest time in reconnaissance and physical risk. As digital defenses improve, attackers increasingly target the human element through manipulation and deception. Staying informed about these evolving tactics protects not just your job, but also the personal information of customers and colleagues in your company's systems.

How GetCyberRight Can Help

Our Awareness Hub provides practical training on recognizing social engineering tactics like vishing (voice phishing) and physical security risks. The interactive modules help families practice identifying red flags in phone calls and understanding workplace security protocols. Training yourself and your family members to spot these manipulation tactics is one of the most effective defenses against modern cyber threats.