Memo Purpose: This memo is intended to inform you about a very recent hack which has taken place. Within the last 24 hours, my Outlook and LinkedIn Accounts have been spoofed. No one else in our office has been compromised. Some of you may have already received or may receive “authentic looking messages” from my account requesting $500 in $100 and $50 denominations via “Steam Gift Card” activation.
Actions: We are in the process of locking down all our unsolicited points of entry. We are communicating with our technologist to ensure we lock down our access while continuing to provide service to all our stakeholders. If you receive such a message, immediately delete it from your mail. Do not purchase any cards. Do not communicate with the person on the other side of the message - they are pushy! We have determined that this spoof originated in Nigeria, but cloaked to appear as if it was coming from my email address.
Current State: We are committed and have taken measures to protect against these types of activities. However, nonprofit organizations continue to be major targets for cybercrimes. We have conducted a Cyber Security Assessment and are pleased to inform you that the findings state: “Northwest Mountain MSDC’s data is well-defended by various layers of security controls” (GMI. Feb. 2018). Our Member, MBE, and Community information is very important to us. Taking measures against security threats is top of mind with us daily. The Council’s MBE files are protected by various layers of security. Our Office Operating System is protected on the Cloud. And, this intrusion has been reported to the appropriate organizations.
Request for Assistance: With your assistance, we can shut down the email spoof with little or no impact to our stakeholders. How you can help: 1. immediately delete any request for money coming from my email address, 2. do not send cash to anyone; and, 3. immediately notify the Council of such messaging.
Thank you for your understanding. We will keep you updated on our activities to keep data and communications secured. Please feel free to call me with any questions.
President and CEO, Northwest Mountain MSDC