In case you missed it …

Fake emails featuring HHS letterhead and the “signature” of the director of the OCR are circulating. These emails aim to fraudulently draw clicks with a message that the recipient be included in a HIPAA “rules audit.” Like many phishing schemes, the emails are very convincing. They even include a “from” address (OSOCRAudit@hhs-gov.us) that looks quite a bit like the actual OCR/HIPAA audit address (OSOCRAudit@hhs.gov).

Alert your employees of this possible scam.  More information is available here.