LORAIN — The Lorain County Board of Mental Health is warning people to watch out for a spoofing scam involved with its staff email system.
Some employees of the board have added a paragraph in a red font to alert people about the possible problem.
“As of Oct. 25, 2017: Please be aware the Lorain County Board of Mental Health staff emails have been compromised,” the message said. “If you receive an email with my name, please confirm that it is from either lcmhb.org or lcbmh.org before opening. Any email with my name and a different domain should not be opened.”
Clare Rosser, director of communications and community relations with the board, said it’s more of a precautionary measure.
“It’s not actually accurate for us to say that our email addresses have been compromised,” she said. “Our email system was not breached; our server was not hacked; no files or information are at risk. Instead, names of staff members have been attached to false, phishing messages.”
Rosser gave a hypothetical example of someone getting an email that has “some kind of (fake) urgent content, and the message appears to be from a staff member here.”
The person clicks on it because they believe it’s from an employee they know, rather than taking an extra moment to check the email address.
The person would then put their own system at risk because someone pretending to be an employee sent them something bad.
“We err on the side of extra caution with these things — hence the big red note at the bottom of my email messages,” Rosser said. “We know that some people are more savvy about email content than others, so we too the opportunity to warn everybody, even though I don’t think any folks outside of our network received a phishing email.”