New phishing emails pose as official OCR audit communications
In case you missed it ... Fake emails featuring HHS letterhead and the "signature" of the director of the OCR are circulating. These emails aim to fraudulently draw clicks with a message that the recipient be included in a HIPAA "rules audit." Like many phishing schemes, the emails are very convincing. They even include a "from" address (OSOCRAudit@hhs-gov.us) that looks quite a bit like the actual OCR/HIPAA audit address (OSOCRAudit@hhs.gov). Alert your employees of this possible scam. More information is available here.
