<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1848329046;
mso-list-template-ids:414764636;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Dear Colleagues,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Kevin confirmed that I may use his distribution list, so I am reaching out for two purposes:<o:p></o:p></span></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoNormal" style="mso-list:l0 level1 lfo1"><span style="font-size:11.0pt">to raise awareness, and<o:p></o:p></span></li><li class="MsoNormal" style="mso-list:l0 level1 lfo1"><span style="font-size:11.0pt">to determine whether anyone else has encountered similar activity.<o:p></o:p></span></li></ol>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Our organization uses a permitting platform called Accela to provide permit-related information to our community.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">In November, our Land Use and Transportation team received a notification from the State regarding malicious actors harvesting permit data for use in a phishing campaign. Thankfully!
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Yesterday, we experienced two related incidents. In one instance, a customer shared the phishing email they received (attached). In another, a customer visited our office to pay an invoice they received from
the “county” via email; however, no such invoice existed in our system.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Looking at the attached, the sending domain in the email is clearly fraudulent: Planning.WashingtonCountyor@usa.com. Additionally, our Planning Commission does not handle permits, nor do they process payments
and the Director’s name, while correct has the last name with a lower case letter.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Has anyone else encountered this phishing campaign within their jurisdiction? If not, please consider this an early awareness notice.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thank you for your time. If you have any questions, feel free to reach out.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Sincerely,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif"><img width="75" height="75" style="width:.7812in;height:.7812in" id="Picture_x0020_1" src="cid:image001.jpg@01DCD739.8F5AC2F0"><span style="mso-ligatures:none"><o:p></o:p></span></span></b></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt">Destiny Fogarty-Olivas </span>
</b><span style="font-size:10.0pt;color:black;background:white">· </span><span style="font-size:10.0pt">she/her/hers<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">Information Security Officer, ITS<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">971-439-9491<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"><a href="mailto:Destiny_Fogarty-Olivas@washingtoncountyor.gov">Destiny_Fogarty-Olivas@washingtoncountyor.gov</a>
<o:p></o:p></span></p>
<p class="MsoNormal"><i><span style="font-size:10.0pt">The opposite of curiosity is conformity<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="font-size:10.0pt"><o:p> </o:p></span></i></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri",sans-serif;color:#236FA1;background:white">CONFIDENTIALITY NOTICE: The information contained in this communication is confidential and is only for use by the intended recipient. If the
reader of this communication is not the intended recipient (or the agent or employee responsible for delivering it to the intended recipient), you are hereby notified that any dissemination, distribution, or reproduction of this communication is strictly prohibited.
If you have received this communication in error, please immediately notify the sender by e-mail and delete this communication from your system. Thank you.</span><i><span style="font-size:9.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></i></p>
<p class="MsoNormal"><span style="font-size:10.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<br>
<div style="background-color:#d7f1fd; width:100%; border-style: solid; border-color:#74a2f8; border-width:1pt; padding:4pt; font-size:10pt; line-height:12pt; font-family:'Calibri'; color:Black; text-align: left;">
<span style="color:#74a2f8; font-weight:bold;">INFO:</span> Washington County email address has changed from @co.washington.or.us to @washingtoncountyor.gov. Please update my contact information.</div>
<br>
</body>
</html>