Officials at Oregon Health & Science University have apologized to employees after a fake phishing test drew complaints about raising false hopes.
The university sent the phishing test email to employees on April 12 offering up to $7,500 in financial assistance, Portland television station KGW8 reported Thursday.
The email, from a “benefit(@)ohsu.edu” address, read in part: “In response to the current community hardship caused by the COVID-19 pandemic, Oregon Health & Science University has decided to assist all employees in getting through these difficult times.” It included a link where respondents could “register” for COVID-related benefits.
[ Read: Research: Simulated Phishing Tests Make Organizations Less Secure ]
But the offer was not real — it was a test intended to measure employees’ cybersecurity awareness and OHSU’s own technology systems. The test was sent several days after the university sent a message to employees warning them about suspicious emails.
The phishing test was met with frustration from some employees.
In a prepared statement, OHSU apologized and said the university didn’t fully consider the harm the phishing test could cause.
“This week, as part of OHSU’s regular exercises to help members practice spotting suspicious e-mails, the language in the test e-mail was taken verbatim from an actual phishing e-mail to ensure no one else fell for the scam. That was a mistake,” the OHSU statement said. “The real scam was insensitive and exploitive of OHSU members — and the attempt to educate members felt the same way, causing confusion and concern.”
Related: Security Awareness Training Debate: Does it Make a Difference?
Related: Report: Security Awareness Training Top Priority for CISOs
More from Associated Press
- Major Massachusetts Health Insurer Hit by Ransomware Attack, Member Data May Be Compromised
- Biden Picks New NSA Head, Key to Support of Ukraine, Defense of US Elections
- White House Unveils New Efforts to Guide Federal Research of AI
- Meta Fined Record $1.3 Billion and Ordered to Stop Sending European User Data to US
- China Tells Tech Manufacturers to Stop Using Micron Chips, Stepping Up Feud With United States
- ChatGPT’s Chief Testifies Before Congress, Calls for New Agency to Regulate Artificial Intelligence
- Philadelphia Inquirer Hit by Cyberattack Causing Newspaper’s Largest Disruption in Decades
- Executive Fired From TikTok’s Chinese Owner Says Beijing Had Access to App Data in Termination Suit
Latest News
- Chrome 114 Released With 18 Security Fixes
- Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards
- Breaking Enterprise Silos and Improving Protection
- Spyware Found in Google Play Apps With Over 420 Million Downloads
- Millions of WordPress Sites Patched Against Critical Jetpack Vulnerability
- Barracuda Zero-Day Exploited to Deliver Malware for Months Before Discovery
- PyPI Enforcing 2FA for All Project Maintainers to Boost Security
- Personal Information of 9 Million Individuals Stolen in MCNA Ransomware Attack
