T. Rowe Price has been targeted by a fraudulent scam where imposters pose as company employees to deceive job seekers. The scammers lure victims with fake job offers often unsolicited and suspiciously lucrative conducting interviews via chat or text. Victims are manipulated into sharing sensitive personal data (e.g., government-issued IDs, financial account details) or making payments under false pretenses, such as purchasing office equipment with counterfeit checks. While no direct breach of T. Rowe Price’s systems occurred, the scam exploits the company’s reputation, leading to potential financial losses for job seekers and reputational harm to the firm. The fraud highlights vulnerabilities in external communication channels and the risks of social engineering tactics targeting prospective employees. The company has issued warnings and urged victims to report incidents, but the scam’s broader impact includes erosion of trust in legitimate hiring processes and potential identity theft for affected individuals.
Source: https://www.troweprice.com/corporate/us/en/careers.html
TPRM report: https://www.rankiteo.com/company/t--rowe-price
"id": "t--2470824102825",
"linkid": "t--rowe-price",
"type": "Cyber Attack",
"date": "10/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': ['job seekers targeted by '
'scammers'],
'industry': 'asset management',
'location': 'global (primarily U.S.)',
'name': 'T. Rowe Price',
'type': 'financial services company'}],
'attack_vector': ['fake job postings',
'unsolicited communications (chat/text/email)',
'impersonation of employees',
'counterfeit checks'],
'customer_advisories': 'Public warning issued to job seekers about fraudulent '
'activities and how to identify legitimate T. Rowe '
'Price communications.',
'data_breach': {'data_exfiltration': ['potential (if victims shared '
'information with scammers)'],
'file_types_exposed': ['scanned copies of IDs',
'bank statements',
'tax forms (if provided)'],
'personally_identifiable_information': ['names',
'addresses',
'government ID '
'numbers',
'financial account '
'details'],
'sensitivity_of_data': 'high',
'type_of_data_compromised': ['personally identifiable '
'information (PII)',
'government identification',
'financial account details']},
'description': 'Scammers are posting fake T. Rowe Price job opportunities and '
'impersonating employees to deceive job seekers. The '
'fraudulent communications are unsolicited, often promoting '
"job opportunities that appear 'too good to be true.' Victims "
'are asked to (1) provide copies of government identification '
'or financial account information; (2) make monetary payments '
'or reimbursements during/after the hiring process; or (3) '
'deposit counterfeit checks to purchase office equipment as '
'part of onboarding. T. Rowe Price clarifies that it does not '
'request payment, send checks, or solicit sensitive '
'information (e.g., bank details, tax forms, credit card info, '
'or government ID copies) during its hiring process.',
'impact': {'brand_reputation_impact': ["erosion of trust in T. Rowe Price's "
'recruitment process',
'negative perception among job '
'seekers'],
'customer_complaints': ['reports from job seekers exposed to the '
'scam'],
'data_compromised': ['government-issued identification',
'financial account information',
'potentially other personally identifiable '
'information (PII)'],
'financial_loss': ['potential losses from counterfeit check '
'deposits',
'monetary payments/reimbursements by victims'],
'identity_theft_risk': ['high (due to solicitation of government '
'IDs and financial info)'],
'operational_impact': ["reputational harm to T. Rowe Price's "
'hiring process',
'increased customer support burden for '
'fraud reports'],
'payment_information_risk': ['high (requests for bank account '
'details, credit card info, or '
'counterfeit check deposits)']},
'investigation_status': 'ongoing (victims encouraged to report incidents)',
'lessons_learned': ['Importance of public awareness campaigns for job scams',
'Need for stricter verification of job postings on '
'third-party platforms',
'Enhanced employee impersonation monitoring'],
'motivation': ['financial gain',
'identity theft',
'fraudulent monetary transactions'],
'post_incident_analysis': {'corrective_actions': ['Strengthen partnerships '
'with job platforms to '
'detect/filter fake '
'postings.',
'Enhance public education '
'on recognizing job scams.',
'Implement reporting '
'mechanisms for suspected '
'fraud.'],
'root_causes': ['Exploitation of trust in the T. '
'Rowe Price brand',
'Lack of verification mechanisms '
'for job postings on third-party '
'sites',
'Social engineering tactics '
'targeting vulnerable job '
'seekers']},
'recommendations': ['Job seekers should verify openings directly through T. '
"Rowe Price's official channels (website/LinkedIn).",
'Avoid sharing sensitive information (IDs, financial '
'details) via unsolicited communications.',
'Report suspicious job offers to the platform and T. Rowe '
'Price.',
'T. Rowe Price should implement proactive monitoring for '
'fake job postings and impersonation attempts.',
'Collaborate with job platforms (e.g., LinkedIn) to '
'remove fraudulent listings promptly.'],
'references': [{'source': 'T. Rowe Price Official Advisory'}],
'response': {'communication_strategy': ['public disclosure via '
'website/LinkedIn',
'guidance for job seekers to verify '
'openings'],
'containment_measures': ['public advisory to job seekers',
'clarification of legitimate hiring '
'practices'],
'remediation_measures': ['encouraging victims to report '
'fraudulent activity to platforms where '
'scams occurred']},
'stakeholder_advisories': ['Job seekers',
'recruitment platforms',
'potential victims of the scam'],
'threat_actor': ['unknown scammers', 'fraudsters'],
'title': 'T. Rowe Price Job Scam and Impersonation Fraud',
'type': ['social engineering',
'impersonation fraud',
'phishing',
'financial scam'],
'vulnerability_exploited': ['human trust',
'lack of verification by job seekers',
'exploitation of job application platforms']}