Learn to recognize phishing e-mails and protect yourself online.
Phishing is a method used by criminals to obtain private information for the purposes of identity or data theft.
Every month, medical professionals around the country succumb to “phishing” scams. Unsuspecting individuals receive fraudulent emails linking to copycat websites, which attempt to trick recipients into revealing valuable personal information. This usually includes usernames and passwords that control access to databases of sensitive financial and medical records of patients and employees of a hospital.
Baylor Medical Center announced that 1,981 patients had personal and medical information compromised after several medical center physicians responded to phishing scam emails.
The UC-Davis Health System announced that personal and medical information of ~1,800 patients had been compromised by a phishing email scam that affected three UC-Davis clinicians.
Saint Louis University announced that several employees provided personal information in response to a phishing scam, compromising the sensitive information of ~3,000 patients.
You don't have to take the bait! Keep yourself safe from phishing by following these three steps:
Just delete it! If you know the sender, you might give them a call to ask if they really sent the message. If you're feeling proactive, you can consider forwarding the message to your IT department. If you receive suspicious emails, then it's likely other people at your institution are receiving them too.
The Trustworthy Healthcare Initiative — © 2014-2015
This work is licensed under a Creative Commons License.