Attn: All Regulated Health and Residential Care Providers and County Partners
As part of the Division’s commitment to Teach, Learn and Collaborate, the Wisconsin Department of Health Services (DHS), Division of Quality Assurance (DQA), wants to make you aware of emails being sent to providers and county partners that is coming from someone impersonating DHS. These appear to be part of a phishing campaign.
About the suspicious email
The email sends users to a webpage that mimics the DHS website and asks users to put their credentials into the form. Do not enter your credentials or any other personal information.
What does it look like?
This is an example of what is in the scam email. Your content may vary.
From name: admin@dhs.wisconsin.gov (This is NOT a legitimate email address.)
From email address: sshort@rootedschool.org
Subject: 2025 Wisconsin Department of Health Services Information Verification
Body of email:
The body of the email includes public-facing facility information including provider name, address, phone number, and email address. This is in an attempt to trick users. There is a NOTE stating, "This verification link below will expire after 24 hours, if we do not receive your verification/update before the link expires, we will have to revoke your license."
Please note, these emails may be coming from other addresses or contain different language.
What should I do when reviewing emails for phishing and scams?
When reviewing any email you receive, consider these security tips:
- Watch out for requests that are not reasonable and call for urgent action.
- Always be cautious with links and attachments in emails, especially from a sender you don’t recognize.
- Hover to discover; hover over any links and look closely at the URL that’s displayed.
- Phishing messages can look like they come from trusted sources or senders you know. If the request feels "off," verify through alternate means; do not reply to the email sender. Responding to a suspicious email might connect you with the bad actor.
- Promptly report all suspicious messages to your security team.
If you have a question about this information, email the DHS Computer Security Incident Response Team (CSIRT) at dhscsirt@dhs.wisconsin.gov.
|
