Our Information Protection & Security department has recently made us aware that two scam emails have been reported targeting our vendors and clients. The FBI has also issued guidance that healthcare organizations are under increased attack by criminals during COVID-19 response.
These scam emails were very sophisticated – the individual or individuals behind them actually purchased a domain that looks nearly identical to our HCA Healthcare email addresses. One was “hcahealLthcare.com” – a tiny change that could be hard to catch!
If you receive a phone call or email that appears to be from our organizatoin, but is not from a known contact, please contact your PMO contact person. They can confirm if the request is legitimate or not.
Remember, we will not abruptly change our billing processes. We would route you through a formal process if we needed to do so; it would not be a one-off email.
Our team provides ongoing education about scams that can be handy to catch these malicious emails, phone calls, and text messages. Watch out for the signs of a PHISH:
- P: Personal Reference or Request
- H: Hyperlink or Attachment
- I: Inaccurate Information
- S: Suspicious Sender
- H: Hurry Up and Respond
