Employee PII (personally identifiable information) is data that identifies an employee or can be used to impersonate them. It may include identity documents, contact details, government identification numbers, payroll records, or banking information. When exposed, these records can enable identity theft, payment fraud, and convincing, targeted phishing.
In cyber incidents, employee PII may be stored alongside email archives, financial documents, or other business files, increasing the potential impact of a breach. Defenders should restrict access to such records, encrypt them, retain only what is necessary, and monitor for unauthorized access. If exposure is suspected, verify which data was accessed and consider appropriate notifications and protections against fraud.