Government email alert system GovDelivery used to send scam messages

Tech Crunch - May 13th, 2025

An email notification system used by U.S. governmental bodies was exploited to send scam emails to residents, falsely alerting them about unpaid tolls. The state of Indiana acknowledged awareness of the fraudulent messages, which appeared to originate from official state agencies. The breach, attributed to a hacked contractor account, involved emails that redirected recipients to malicious sites. Indiana's Office of Technology is collaborating with the involved company, identified as Granicus, to halt further fraudulent communications. Granicus confirmed the breach was due to a compromised user account, but maintained that their systems were not directly breached.

This incident highlights the growing trend of scammers targeting official-looking email systems to deceive recipients into providing personal information. By mimicking government notifications, these scams exploit the trust associated with official domains. The Federal Trade Commission had previously warned about such toll-related scams. The breach's implications underline the importance of robust cybersecurity measures and vigilant monitoring of government communication channels to protect citizens from identity theft and fraud.

Indiana Federal Trade Commission Cybersecurity Scam Emails Gov Delivery Granicus Email Breach Fraudulent Toll Alerts

Story submitted by Fairstory

RATING

7.6

Fair Story

Consider it well-founded

The article is a well-researched and timely piece that effectively communicates the issue of scam emails being sent through a government notification system. It accurately reports the facts and provides a balanced view by including statements from key stakeholders. The story is relevant to public interest, as it highlights potential threats to personal security and raises awareness about cybersecurity vulnerabilities. However, it could benefit from additional perspectives, such as expert analysis or input from affected individuals, to provide a more comprehensive understanding of the situation. Overall, the article succeeds in informing the public while maintaining clarity and accuracy.

Accuracy

The article accurately reports the use of the GovDelivery system to send scam emails, corroborated by multiple sources. It truthfully describes the breach as involving a compromised contractor account, which aligns with statements from Indiana officials and Granicus. However, the article could improve by providing specific figures on the number of affected individuals and further details on the breach timeline. The claim about the contract status with Granicus is supported by Indiana's statement but requires further verification regarding the account's management post-contract.

Balance

The article presents multiple perspectives, including statements from Indiana state officials and Granicus. However, it lacks input from cybersecurity experts or affected individuals, which could provide additional context and balance. The focus is primarily on official responses, which might lead to a slight imbalance by not thoroughly exploring the broader implications of such scams.

Clarity

The article is well-structured and uses clear language, making it easy to understand. It logically presents the sequence of events, from the initial discovery of the scam emails to the responses from Indiana and Granicus. However, some technical terms, such as 'compromised user account,' could be better explained for readers unfamiliar with cybersecurity terminology.

Source quality

The article relies on credible sources, including official statements from the Indiana Office of Technology and Granicus. These sources are authoritative and relevant to the topic. However, the article would benefit from additional independent sources, such as cybersecurity analysts, to enhance its reliability and provide a more comprehensive view.

Transparency

The article is transparent about its sources, citing official statements and providing context for the breach. However, it lacks detailed information about how the breach was discovered and the steps taken to mitigate it. Providing more background on the GovDelivery system and its role in government communications could improve transparency.