GovDelivery, an email alert system used by governments, abused to send scam messages

GovDelivery, an email alert system used by governments, abused to send scam messages

A government email notification system used by U.S. federal and state agencies has been exploited to send scam emails containing malicious links. Multiple government entities, including Indiana and Doña Ana County, have reported breaches linked to compromised accounts and malicious messages.
Affected: Indiana government, Doña Ana County government, govdelivery.com platform, Texas Department of Transport, Granicus.

Keypoints

  • Scammers are exploiting official government email systems to send fraudulent messages about unpaid tolls.
  • The breach involved a compromised user account within the GovDelivery system managed by Granicus.
  • The scam emails contain malicious links that redirect recipients to fake websites designed to steal personal information.
  • Multiple government agencies, including Indiana and Doña Ana County, have experienced system-wide compromises.
  • Government organizations are working to contain the breach and prevent further malicious activities.

Read More: https://techcrunch.com/2025/05/13/government-email-alert-system-govdelivery-used-to-send-scam-messages/