The State Worker

California state department tries to trick employees with fake email over bonuses

SEIU Local 1000 is state government’s largest union.
SEIU Local 1000 is state government’s largest union. Sacramento Bee file

A California state department emailed a fake phishing scam to its employees Wednesday that manipulated the logo of Golden 1 Credit Union and played on anticipation for $2,500 contract bonuses that many state workers are receiving this week.

The phishing email asked workers to click a link that would “validate their employment status.” Then, the message said, workers would immediately receive their bonuses through a direct deposit.

The message to employees in the Department of Housing and Community Development was effective enough that Golden 1 received a call about it, and the State Controller’s Office sent an email to thousands of state workers warning them not to click on it.

It was intended to be a cybersecurity test for the housing department, according to an email that employees received about 90 minutes after the phishing message was sent. The department did not notify Golden 1 that it planned to distribute the test, according to the credit union.

The department also did not inform state government’s largest union, Service Employees International Union Local 1000, that it had created a fake phishing scam using the bonuses its members are receiving as bait. The $2,500 bonuses were a feature of the 42-month contract SEIU negotiated in December after calling off an announced one-day strike.

The original message blended the logos of Golden 1 and SEIU 1000 to announce a partnership between the credit union and state government. It included an image of SEIU 1000 President Yvonne Walker with the text “We have a contract!”

Phishing scam 

A screen shot of the e-mail sent to workers at the Department of Housing and Community Development.

“While we appreciate the importance of cybersecurity, in the future we’d ask for better coordination by the state,” said SEIU 1000 spokesman Jerry Jimenez. “The state used President Walker’s image in their test without giving us advance notice, and using bonus checks as click-bait on the week state workers actually received their long-awaited checks caused unnecessary confusion.”

In addition to Walker’s image, the email included a signature of Golden 1 President Donna Bland.

The credit union first learned about it when one of its members called to report a phishing scam. The credit union read the message and believed it was a malicious phishing attempt. The credit union reported it to the State Controller’s Office, which then broadcast its warning.

“The safety and security of our members, and the community, are top priorities for Golden 1. We appreciate the quick action by the State Controller’s Office to notify employees about this scam,” said Golden 1 Vice President for Account Services Kathy Flynn.

The warning from the State Controller’s Office stressed that the message was fake.

“There is no such partnership or online portal,” the warning says. “SEIU members should be advised not to click any links and immediately delete the email.”

At 12:15 p.m., employees at Housing and Community Development received another email that said their own information technology team created the phishing message.

“SEIU and Golden 1 were not involved in this internal test and there is no need to contact SEIU or Golden 1,” the unsigned message said.

It said: “All HCD staff received a bogus email asking you to click on a link to find out more about a recent salary bonus for SEIU-represented employees. This test is part of an internal test to gauge our preparedness for cyber security attacks that invite staff to click on links to unknown websites (which employees should never do).”

The message is unsigned, although it attributes the test to the department’s information technology staff. Department spokeswoman Evan Gerberding said it was a regular “internal exercise” and that employees were given a warning to look out for a suspicious message.

SEIU Local 1000 members have been waiting for their bonuses since they approved their contract in January. Gov. Jerry Brown signed the contract in March, and employees only now are starting to receive the bonus payments.

“These checks mean not only money in your pocket, but they are a reminder of the power of our union when we stand together with one voice,” Walker said in a message to members on Wednesday announcing the distribution of the bonuses.

After taxes, employees are seeing a wide range of take-home pay from their bonuses. Workers who contacted The Bee said they’ve receiving payments of $1,400 to $1,800.

The taxes are based on workers’ April wages, special pay from that month and the bonuses, according to a message the controller’s office sent to human resources departments last month.

Adam Ashton: 916-321-1063, @Adam_Ashton. Sign up for state worker news alerts at sacbee.com/newsletters.

  Comments