The employees of Scotty’s Brewhouse are wondering if they’re about to be victims of identity fraud, after someone in the business office accidentally released their personal information to a scammer.

The W2s for all 4,000 of the company’s employees, including those at the Mishawaka location, were inadvertently leaked to a scammer, according to the Indy Star.

The restaurant’s payroll account manager got an email from someone claiming to be the CEO, asking her to send all 4,000 of their employees’ 2016 W2 forms by PDF format in an email. She did so, but it was a scammer, and not the CEO, who sent the message.

The company says no customer information was released as a result of the incident, and they are offering free credit monitoring to their affected employees.

The FBI, Indiana State Police and the Indiana Attorney General‘s office are working together on a massive case of suspected identity theft. So far, no suspect has yet been identified.