July 2024 - CORSA-broadcast

Business Email Compromise: The $43 Billion Scam
by Frank Hatfield Dec. 13, 2024

Dec. 13, 2024

Business Email Compromise/Email Account Compromise (BEC/EAC) is a sophisticated scam that targets both businesses and individuals who perform legitimate transfer-of-funds requests. The scam is frequently carried out when an individual compromises legitimate business or personal email accounts through social engineering or computer intrusion to conduct unauthorized transfers of funds. The scam is not always associated with a transfer-of-funds request. One variation involves compromising legitimate business email accounts and requesting employees' Personally Identifiable Information, Wage and Tax Statement (W-2) forms, or even crypto currency wallets. Losses associated with BEC scams quadrupled last year to an astonishing $43 Billion according to the FBI statistics below. Just last week about $4 million in federal funding intended for housing assistance in Kentucky was stolen after someone directed that money to a private bank account. (Source: https://www.cnn.com/2022/08/29/politics/kentucky-4-million-cyber-theft/inde… ) "These types of attacks can be especially impactful to state and local governments that may do business with dozens, if not hundreds, or different vendors," Hassold, who is now director of threat intelligence at cybersecurity firm Abnormal Security, told CNN. FBI SUGGESTIONS FOR PROTECTION * Use secondary channels or two-factor authentication to verify requests for changes in account information. * Ensure the URL in emails is associated with the business/individual it claims to be from. * Be alert to hyperlinks that may contain misspellings of the actual domain name. * Refrain from supplying login credentials or PII of any sort via email. Be aware that many emails requesting your personal information may appear to be legitimate. * Verify the email address used to send emails, especially when using a mobile or handheld device, by ensuring the sender's address appears to match who it is coming from. * Ensure the settings in employees' computers are enabled to allow full email extensions to be viewed. * Monitor your personal financial accounts on a regular basis for irregularities, such as missing deposits. Source: FBI Public Service Announcement https://www.ic3.gov/Media/Y2022/PSA220504 CORSA is committed to keeping members informed of and protected against threats to their financial assets and systems. BEC and/or payment fraud is on the rise which creates considerable exposure to governmental entities, including CORSA members. Current technology provides sophisticated criminals the tools to create or alter checks or divert payments via BEC or social engineering. In addition to the FBI's above recommendations, CORSA strongly encourages members to enroll in the anti-fraud services Positive Pay and ACH Positive Pay. The Ohio Auditor of State also recommended enrolling in the above anti-fraud services to guard against check fraud. (See: Auditor of State Best Practices https://ohioauditor.gov/publications/bestpractices/best%20practices%20sept%…) Positive Pay is a service that essentially requires bank customers to provide their bank with a list of checks that are to be paid, while payment is withheld for any checks that don't match the customer's list. The ACH Positive Pay service allows a customer to set parameters on payments. For instance, payments that occur regularly with similar amounts can be set up to pay automatically, while any payments that fall outside normal transactions will be suspended until authorized. Most banks offer Positive Pay and ACH Positive Pay for a fee. In CORSA's experience fees vary, but customers are able to significantly lower fees through negotiation. Should you have questions regarding Positive Pay or ACH Positive Pay contact Thisbe Butcher at tbutcher(a)ccao.org<mailto:tbutcher@ccao.org> [Chart depicting Reported Loss Associated with BEC/Cryptocurrency Complaints for the years of 2018, 2019, 2020, and 2021.] Frank Hatfield CORSA Risk Manager fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<http://www.corsa.org/> [cid:image002.png@01D8BD3E.0B6EC360] " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 2

Cybersecurity Reimbursement
by Frank Hatfield July 11, 2024

July 11, 2024

Cyberattacks have become increasingly common in recent years. In fact, studies conducted by the University of Maryland's A. James Clark School of Engineering found that more than 2,200 cyberattacks occur each day. When broken down, that means someone becomes a victim of a data breach, phishing attack, or other cybercrime every 39 seconds. Source: https://explodingtopics.com/blog/cybersecurity-stats CORSA is committed to providing ongoing risk management services, including cybersecurity, to members. For 2024 CORSA allotted $465,000 ($5,500 maximum per member) to reimburse members for cybersecurity expenditures during calendar year 2024. Thank you to those members who have taken advantage of this program. If you haven't yet submitted for a cybersecurity reimbursement, we encourage you to submit a reimbursement request while funds remain available. More information on this program as well as a reimbursement application is attached. Feel free to contact me with questions or if you need anything. Thank you. Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> [cid:image001.png@01DAD39B.0E6F55A0] " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

Emergency Action Plans
by Frank Hatfield July 11, 2024

July 11, 2024

Mahoning County is looking to obtain examples of other counties' county-wide and building specific emergency action plans....specifically regarding evacuation, shelter in place, medical emergency and building lock downs. Would appreciate if anyone offered their policies. Thank you. CATHY JONES Director, Risk Management ADA Coordinator Board of Mahoning County Commissioners 21 W Boardman St. Youngstown, OH 44503 Ph. 330-740-2130 Fx. 330-740-2667 cjones(a)mahoningcountyoh.gov<mailto:cjones@mahoningcountyoh.gov> [cid:image001.jpg@01DAD36D.644AA340]

2 1

Late fees
by Diane Davis July 11, 2024

July 11, 2024

With the growing problems at the US post office, we are wondering what other counties are doing to try to prevent late fees. We sometimes get our bills in the mail with very little time to get a check out in the mail. Other times we mail a check and it does not get processed by the utility company or credit card for 10 to 15 days. If anyone can share what your county is doing to control the late fees that would be appreciated. -- Diane Davis Washington County Director HR/Safety/Wellness Coordinator 223 Putnam St Marietta Ohio 45750 740-373-6623 Ext 2015

1 0

Summer Driving
by Frank Hatfield July 9, 2024

July 9, 2024

I hope everyone had a Happy & Safe July 4th weekend. Unfortunately, the holiday weekend reminds us that Ohio roadways can be hazardous and even deadly. The attached OHSP Holiday Recap illustrates just how hazardous our roadways can be. We continue to encourage members to take advantage of in-person defensive driver training and online training at CORSA U. All courses offered by CORSA are available to member counties at no cost to the county and count toward the 2024 Loss Control Incentive. Online CORSA U defensive driving classes and/or our current model driver eligibility criteria may be found at www.corsa.org<http://www.corsa.org>. Additionally, the NHTSA's Summer Driving Tips can be found at: https://www.nhtsa.gov/summer-driving-tips. As always, feel free to contact us with questions or if you need anything. Stay safe. Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> [cid:image001.png@01DAD1E4.FE61EC70] " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

translation services
by Jenny Phelps July 9, 2024

July 9, 2024

I'm wondering what services other counties use for translators. We need a Spanish translator to speak to somebody about a sensitive subject but we're looking for services that offer many languages. Thank you, Jenny Phelps Loss Control Program Coordinator office: 419-774-6318 fax: 419-774-3581 -- CONFIDENTIAL: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

3 2

Land Bank Director Position
by Pamela S. Davis July 8, 2024

July 8, 2024

I am looking for information from other Counties regarding: * Does the County employ a Land Bank Director? * If yes, is the Land Bank Director a sole position or do they perform dual duties under another County position? * What is the annual compensation for the Land Bank Director? * Is it a full time or part time position? For Example: Muskingum County has an employee that is compensated as a full time employee and holds the positions of: Director of Planning Commission ($30.83 hr. @ 20 hrs. week), GIS Manager (29.92 hr. @ 20 hrs. week), and Land Bank Director ($36,000 annually). Land Bank reimburses the County for Payroll costs and employee conducts work on County time. Thanks in advance for any information you can share. Thanks! Pam Davis Human Resources Muskingum County 740-588-4371

4 3