Summary: Alight is providing additional guidance on recognizing and preventing industry-wide imposter fraud, including a client-ready email template that addresses the recent rise in robocall scams.
Please note, Alight is issuing this alert in the interest of assisting with the education of our clients, participants and colleagues. Anything discussed or provided IS NOT related to any specific incident involving Alight systems. Alight’s environment remains secure.
Action: Please review the information below and use the provided client-ready email template to communicate Alight’s recognition and preventative measures with your clients. As well, leverage the provided FAQ to REACTIVELY address any additional questions your clients may have.
If you require additional assistance, please contact the Alight Response Center.
—
Client-facing colleagues,
A few weeks ago, Alight issued informational alerts to clients, participants and colleagues regarding fraudulent actors targeting accounts at many organizations and impacting consumer accounts.
These are targeted phishing attacks across all verticals of business designed to trick individuals into volunteering sensitive information. These often involve individuals impersonating entities such as a fraud department, the government, relatives in distress, well-known businesses or technical support experts.
Scammers can exploit urgency and fear to manipulate victims into acting without careful consideration. Education is the best defense against imposter scams.
Businesses across the world, including those in our industry, are experiencing an increase in imposter scams. The latest trend involves robocalls to participants requesting one-time security codes.
Due to the uptick in these scams as well as Alight's proactive communication in the recent weeks advising clients and participants to be vigilant, you are likely receiving an increase in questions about whether Alight is affected and what Alight is doing. The email template and FAQs below will help you address these inquiries.
Key points to communicate to clients:
• These scams are not specific to Alight but represent an industry-wide issue
• Alight will never contact participants via robocall that prompts them to enter a one-time code
• We are proactively monitoring this issue and evolving our security procedures as the threat landscape continues to evolve.• Alight will partner with you to help inform participants to not fall prey to these scams as the threat landscape evolves
Action: Please review the information below and use the provided client-ready email template to communicate Alight’s recognition and preventative measures with your clients. As well, leverage the provided FAQ to REACTIVELY address any additional questions your clients may have.If you require additional assistance, please contact the Alight Response Center.
— Client-ready email template Subject: Protecting against industry-wide imposter fraud – guidance on recognition and prevention Dear [Client Name],
We're reaching out to share important information regarding a rise in imposter fraud affecting businesses across all industries. While these scams are not specific to Alight, we believe it's crucial to keep you informed about emerging threats that could potentially impact your participants.
