I contacted a previous employer to get my W-2, who did not have my current address. The accountant said she would email me a copy and accidentally emailed me EVERY SINGLE PERSONS W-2 in the company, which is 122 employees, with all their social security numbers and information. I was extremely upset about the situation and was worried my information may have been sent to other parties as well. I told my ex-coworker what had happened, as she still works there, in an attempt to determine if she had received similar information or had heard that anyone else had. I did not share the information contained within the W-2's with anyone, only the knowledge that I had received the information.
Yesterday I received a letter from my ex-employers attorney, threatening to sue, and I am not sure what to do at this point. I don't know how to respond and I wanted to talk to an attorney before I do. Did I violate any laws by telling my ex-coworker I had received the information although I did not share the information with anyone? Please help.
This is the letter I got yesterday from an attorney:
"It has come to our attention that a PDF file containing private information about [The Company's] employees was mistakenly emailed to you. It has also come to our attention that you shared the information you received with other third parties.
Please be advised that the information you received is private and confidential information regarding third parties. As a result of the confidential nature of the information involved, you have no right to retain or disseminate this information to anyone. YOU HAVE A DUTY TO IMMEDIATELY DESTROY THIS INFORMATION.
[The Company] requests that you provide my office with a list of individuals who you have shared this information with and declaration from you, signed under penalty of perjury, indicating that you have destroyed all information you received from [The Company] no later than Friday, February 17, 2012 at 4:00pm.
In the event you fail to destroy this information and provide us with the information requested above, [The Company] will pursue legal action against you and will seek all available remedies provided by the law including, but not limited to, monetary damages and injunctive relief. Additionally, if [The Company] is forced to intitiate legal action against you, it will be seeking its attorney's fees and costs against you personally. The fees and costs relating to litigating claims involving violations of third parties can be tens of thousands of dollars. I urge you to immediately destroy this information and provide our office with the information requested above by February 17, 2012 at 4:00pm."