The Health Board of Metropolis County has issued a public apology after a recent phishing incident that targeted its own employees. The board acknowledged sending a fake email offering an extra vacation day, which was intended to test the staff’s response to phishing attempts.
Misleading Vacation Day Email Sparks Outrage
According to the statement, the Health Board sent an email to all employees on June 15th, 2026, informing them that they had been awarded an additional paid vacation day. However, the email was later announced to be a phishing test, designed to gauge how staff would react to such a message.
Breach of Trust and Transparency Concerns
The decision to conduct the phishing test without prior warning has been met with widespread criticism from Health Board employees. Many felt the stunt was a breach of trust and undermined the board’s commitment to transparency and open communication.
Apology and Promised Improvements
In a statement, the Health Board acknowledged the mistake and apologized for the distress caused to its staff. “We recognize that our actions have damaged the trust and morale of our dedicated employees,” said Board Chair Dr. Samantha Patel. “We are committed to reviewing our security training protocols and using more transparent communication practices going forward.”
Lessons Learned and Next Steps
The Health Board stated that it will be conducting a full review of its Cybersecurity policies and employee training programs. the board promised to establish a new Cybersecurity Advisory Council, which will include representatives from the workforce, to provide ongoing guidance and feedback.
