Identifying the warning signs of a data breach is vital for protecting payroll integrity. Red flags include sudden login failures for multiple users (Option A), which may indicate a system takeover, or " business email compromise " (BEC) scams where an attacker poses as an executive (Option B) to request sensitive W-2 data. Another common indicator is multiple employees changing their direct deposit to the same suspicious account (Option D), a hallmark of payroll diversion fraud. However, receiving a request for verification of employment (VOE) on a Saturday (Option C) is generally not an indicator of a breach. While the timing may be outside normal business hours, VOEs are common routine requests from lenders or landlords that may be processed by automated third-party services at any time. Payroll departments must maintain vigilant monitoring and provide regular cybersecurity training to staff to recognize and report high-risk anomalies immediately.