OHSU falsely promises $7,500 to workers in phishing exercise
This week health workers and other staff at Oregon Health and Science University were promised several thousand dollars as part of a COVID-19 hardship bonus. But the email was fake, and it was sent by their own administrators.
The email promised up to $7,500 in assistance “to all employees who are experiencing financial hardship as a result of the coronavirus pandemic.”
“Supporting our employees, and community is essential during these challenging times,” it concluded.
The email included a link that took workers to a web page announcing that the email was a phishing exercise — a way to train employees not to be tricked by scams. OHSU workers weren’t getting a bonus after all.
“It was a tone-deaf response to everything we’ve been experiencing with COVID,” said OHSU registered nurse Natasha Swartz. “The hospital knows how much everyone is just struggling emotionally regarding the amount of extra work we’ve had to put in and the amount of loss we’ve seen over the last two years.”
OHSU later apologized for the email and deleted it from staffers’ inboxes.
In a statement, OHSU administrators called the phishing exercise a “mistake.” They said the email used the same language from a real phishing email that was sent to thousands of staffers.
“The real scam was insensitive and exploitive [sic] of OHSU members — and the attempt to educate members felt the same way, causing confusion and concern,” it reads.
Editor’s Note: An earlier version of this story did not mention that the phishing exercise email sent to OHSU staff by its administrators mirrored a real phishing email. This story has been updated to include that context.
Copyright 2022 Oregon Public Broadcasting. To see more, visit Oregon Public Broadcasting.