Increased Social Engineering Attempts Targeting HCPSS Staff

All staff should be aware of an increase in social engineering attempts targeting HCPSS employees in recent weeks. Malicious individuals are impersonating HCPSS staff and attempting to deceive employees into resetting passwords or divulging sensitive information. These attackers have also contacted Human Resources, attempting to solicit personal employee details to exploit staff credentials.

 ! Call to Action: To protect yourself and our organization, please remain extra vigilant and follow these critical security precautions:

• Verify Identity: If you receive unsolicited requests for password resets, login credentials, or sensitive staff information, do not comply without independently verifying the request through official HCPSS channels.
• Be Cautious with Information Requests: If you receive a request for employee information, confirm its legitimacy directly with the requesting department before providing any details.
• Report Suspicious Activity: If you receive a suspicious email or phone call requesting sensitive information, report it immediately.
• Never Share Passwords: IT staff will never ask you for your password under any circumstances.

Cybersecurity is a shared responsibility, and your vigilance is critical in thwarting these attacks.

Employees are encouraged to forward any suspected phishing emails to abuse@hcpss.org, and then delete the email. If you have any questions or need assistance, contact the Technology Support at TechSupport@hcpss.org or 410-313-7004.