Madison, Wis. – The Wisconsin Department of Health Services (DHS) issued an urgent advisory on Monday, Oct. 31, warning its network of partner agencies about a fresh phishing campaign targeting state employees and contractors. According to the department, the malicious messages are crafted to look like routine internal communications from a DHS colleague, complete with a familiar name and logo.
How the scam works
Scammers send an email that appears to originate from a known DHS staff member. The message typically contains a brief note asking the recipient to “review or submit a bad proposal” and includes a hyperlink labeled as a secure portal. When the link is clicked, the user is taken to a counterfeit login page that mimics the department’s official system. The page asks for usernames, passwords, and sometimes additional personal identifiers. Once entered, the credentials are captured by the attackers, who can then use them to gain unauthorized access to internal networks.
What partners should do
The DHS advisory stresses three immediate actions for all partners:
- Delete the suspicious email without clicking any links or opening attachments.
- Do not provide any login information if you have already clicked the link. Close the browser window immediately.
- Contact your IT support team right away to report the incident and receive guidance on securing your accounts.
IT staff are instructed to monitor for any unusual activity and to reset passwords for any accounts that may have been compromised. The department also recommends enabling multi‑factor authentication (MFA) wherever possible, as an added layer of protection against credential theft.
Why the warning matters
Phishing attacks have become increasingly sophisticated, often exploiting the trust that employees place in familiar internal communications. By impersonating a colleague, scammers bypass the usual skepticism that users might apply to messages from unknown external sources. The DHS warning is part of a broader effort by state agencies to reinforce cybersecurity hygiene across the public sector.
“Our partners are essential to delivering health services throughout Wisconsin,” said a DHS spokesperson. “We want to ensure they are equipped with the knowledge to recognize and thwart these deceptive attempts before any damage occurs.”
Additional resources
The department has posted a short video tutorial on its intranet that demonstrates how to spot phishing cues, such as mismatched email addresses, unexpected requests for credentials, and suspicious hyperlinks. The tutorial also outlines steps for reporting suspicious emails through the state’s centralized security portal.
For anyone who believes they may have fallen victim to the scam, the DHS urges immediate contact with the IT help desk at [email protected] or by calling the dedicated hotline at (608) 555‑0123. Prompt reporting helps limit potential exposure and allows the department to take swift remedial action.
As cyber threats continue to evolve, the Wisconsin Department of Health Services remains committed to safeguarding the digital infrastructure that supports critical health services for residents across the state.
Original reporting: NBC15 WMTV (Gray) – local — read the source article.
