This was a simulated phishing test
Nobody is in trouble. This is an internal cybersecurity test from Good Heart Tech.
Please don't tell anyone in your organization, so your coworkers still get a fair test.
Understanding phishing attacks
Phishing is a deceptive cyberattack where scammers impersonate trustworthy people or organizations to steal sensitive information. Nonprofits are frequent targets because of donor data, financial accounts, and limited IT staff.
62%
of data breaches involve a person being tricked
Verizon DBIR 2026
73%
of nonprofit cyber claims started with phishing
Coalition nonprofit claims data
How to protect yourself
- Be skeptical: Don't trust emails asking for sensitive information, even if they look like they came from someone you know.
- Verify requests: Confirm suspicious requests another way, such as a phone call to a number you already have.
- Report suspicious messages: Use your email provider's report-phishing tools so the rest of your team can be protected.
- Use multi-factor authentication: An extra sign-in step makes stolen passwords much less useful.
- Stay updated: Regular training is how you learn the latest tricks before they work.