Archive — US — techcrunch
Government email alert system GovDelivery used to send scam messages
The U.S. government email alert system GovDelivery was compromised to send scam emails about unpaid tolls. Indiana's government confirmed fraudulent messages were sent to residents, originating from a hacked contractor's account. Granicus, the contractor involved, acknowledged the issue but stated their systems were not breached. This scam exploits trust in official communications to gather personal information from victims.
Key points
- GovDelivery, a system used by U.S. government agencies, was exploited for sending scam emails.
- Indiana officials reported awareness of fraudulent emails claiming unpaid tolls to residents.
- The scam involved a hacked contractor's account, leading to scams appearing as official state communications.
- The Indiana Office of Technology is working to prevent further fraudulent emails.
- Emails contained misleading links, redirecting users to malicious websites for personal data collection.
- Granucs confirmed a user account compromise but denied a breach of its systems or data.
Why it matters
- Scams using reputable systems are increasingly common, as the FTC noted a rise in such incidents.
- Previous major data breaches have highlighted vulnerabilities in third-party services utilized by government agencies.
- As cybersecurity evolves, the trend shows a need for tighter control and vetting of contractors handling government communications.
The misuse of GovDelivery highlights the vulnerabilities in email communication systems employed by government agencies, emphasizing the necessity for enhanced security measures to protect against such scams.