The Department of Regulatory Agencies (DORA) was notified about an email phishing scam designed to look like it was sent from a DORA employee. The email has the subject line: “Re: Action Required – DORA Enforcement Notice #93742” and appears to be sent by a fabricated DORA employee, Cassy T. Sullivan.
If you have received this email, do not click on any links and report it as phishing. The State of Colorado Governor’s Office of Information Technology is aware of this phishing attempt and is investigating.
If you receive a suspicious email from a state entity, please call the relevant department using the telephone number listed on a state government website to confirm the email’s legitimacy.
You can also do some checks yourself including confirming whether the email address is legitimate, checking whether the email address matches the signature of the person sending the email, and closely reading the text of the email. Please note that Colorado employees have an email address that ends in “state.co.us” and the email address in the phishing email did not include that official part of the email address.

