FACEPALM: Facebook and Google confirmed as victims of $100M phishing scam.

Both companies confirmed to Fortune that their employees were victims of the phishing scam, where the perpetrator — 48-year-old Evaldas Rimasauskas — forged email addresses, invoices, and contracts to swindle Facebook and Google into paying for electronic supplies. The payments were deposited into bank accounts in Latvia, Cyprus, Hong Kong, Slovenia, Hungary, and Lithuania.

The court documents unsealed by the DoJ last month described the two tech companies as a “multinational technology company, specializing in internet-related services and products, with headquarters in the United States,” and a “multinational corporation providing online social media and networking services.” There are hundreds of companies that could have fit the above descriptions, but the reveal makes it pretty obvious in hindsight.

How much of your data do you entrust to these two companies?