Government Email System Exploited for Toll Scam Emails Targeting Residents

In a recent cybersecurity incident, Indiana's government email notification system was exploited to send scam emails to residents, falsely claiming unpaid toll balances. These fraudulent messages appeared to come from official state agencies, increasing the likelihood that recipients would trust and open them.

The scam emails contained disguised links that redirected users to malicious websites impersonating the Texas Department of Transportation's toll collection service. These sites aimed to harvest sensitive personal data, including names, addresses, phone numbers, and credit card details, putting victims at risk of identity theft and financial fraud.

Investigations revealed that the breach originated from a compromised contractor account associated with the email delivery service provider, Granicus. Although the state’s own systems were not directly compromised, the contractor’s failure to remove the state’s account after contract termination in December 2024 contributed to the vulnerability.

This incident underscores the increasing sophistication of scams targeting government communication channels. By mimicking official notifications, scammers exploit public trust to distribute phishing attacks, making cybersecurity measures around government email systems critical.

Key Lessons and Preventative Measures

• Ensure timely deactivation of contractor and third-party accounts after contract completion to prevent unauthorized access.
• Implement multi-factor authentication and continuous monitoring on all accounts with access to government communication platforms.
• Educate residents on recognizing official communications and verifying suspicious messages through official channels.
• Regularly audit third-party vendors’ security practices to ensure compliance with government cybersecurity standards.

The rise of scams leveraging government communication systems highlights the urgent need for robust cybersecurity frameworks. Protecting these channels not only safeguards sensitive data but also maintains public confidence in government services. Agencies must prioritize securing their digital infrastructure and collaborate with trusted partners to prevent similar breaches.