Ethics: What Would You Do?

From the mentioned scenario, it is a case of phishing that is the part of cyber crime and it involves sending fraudulent emails and asking people to come to the website and share their personal information that can be used for the unauthorized and criminal activities. In this situation, the first step, I can do is to report it to the cyber crime prevention cell (Internet Crime Complaint Center in the USA) in the country. The second step, will be to send immediate SMS, mails and electronic calls to all the employees that the organization never asks these information via emails or using this type of mailing services. If it is required, then it is to be submitted in person to the HR office or send it via encrypted messages, using company's own communication network. The third step, will be to secure the server, as well as other organizational database with updated applications so that data cannot be stolen by the unauthorized people. It will also be recommended to the employees to change their passwords, so that their personal details are protected.

Does that help?