Attn: Behavioral health and residential care providers
This message is being sent licensed or certified behavioral health and/or residential care providers
The Department of Health Services (DHS) wants to make you aware of email being sent to providers that is coming from someone impersonating our agency. These appear to be part of a phishing campaign.
We have seen an example from JonathanErwin2024@outlook.com with a subject of WISCONSIN DEPARTMENT OF HEALTH SERVICES INFORMATION UPDATE. The body of the email includes public-facing facility information including provider name, address, phone number, and email address. There is a NOTE stating, “This verification link below will expire after 24 hours, if we do not receive your verification/update before the link expires, we will have to revoke your license.” Please note, these emails may be coming from other addresses or contain different language.
When reviewing emails, consider these security tips:
- Check the sender’s identity. Any email sent from a state employee will have the “@dhs.wisconsin.gov” at the end of the email. DHS will never send an official email using any other domain type (for example, @gmail.com, @outlook.com, @school.org, etc.).
- Hover to discover; hover over any links and look closely at the URL that’s displayed.
- Always be cautious with links and attachments in emails, especially from a sender you don’t recognize.
- Verify requests through alternate means; do not reply to the email sender.
- Watch out for requests that are not reasonable and call for urgent action.
- Using the above example, DHS will not revoke a certification in 24 hours for failure to click on a link. DHS will always be in direct communication with you if there are issues that start the revocation process.
|
