401(k) Cyber Fraud Is Growing. Everyone Could Be Liable

This article warns of rising cyberattacks targeting retirement accounts (401(k)s, pensions, FSAs, HSAs) that exploit weak authentication, stolen PII, and social engineering to perform fraudulent distributions; it cites multiple high-dollar thefts, a court ruling broadening plan sponsor liability, FBI advisories, and recommends stronger controls (MFA, knowledge-based authentication, employee training, and contractual security obligations for plan administrators).