Your 401(k) is the new identity theft target

An impostor phoned Alight Solutions, the recordkeeper for Colgate-Palmolive's 401(k) plan, and identified herself as a Colgate employee. She asked to update the contact information on an account. Months later, the entire $751,430 balance had been sent in a single lump sum to a Las Vegas address and bank account. The real account holder, Paula Disberry, was living in South Africa.

Disberry sued Alight, Colgate's benefits committee and BNY Mellon, the plan's custodian, to recover the money.