P2016-ND-25

One of the Organization’s employees was receiving pop-up messages and virus warnings while she was online. She called the internet service provider number given in the pop-up message, and gave full computer access to an individual purporting to be the ISP account representative. The employee stated that while all of her financial applications and client files were closed, she could not be certain whether or not any information was accessed on her computer.

The Organization later conducted its own investigation into this incident and determined that the authenticity of the ISP could not be established, and therefore the Organization concluded that their employee was a victim of a phishing scam.