Healthcare Workers Outraged by Phishing Test Masquerading as Holiday Offer

In Newfoundland and Labrador, Canada, healthcare workers received a phishing test email falsely offering an extra paid day off, which was intended to assess their cybersecurity awareness. The email, framed as a reward for hard work during the rollout of the CorCare health information system, was sent by Newfoundland and Labrador Health Services. Union leaders criticized the exercise as 'cruel' and 'insulting,' particularly given the ongoing burnout and staffing shortages in the healthcare sector. The interim CEO of NL Health Services acknowledged the inappropriateness of the test and promised to review future awareness exercises. The phishing test was part of a broader trend of using simulated attacks to improve cybersecurity awareness among employees. However, the sensitive timing and context led to significant backlash from staff and union representatives. Many employees felt emotionally manipulated by the false offer, highlighting the need for more considerate approaches to cybersecurity training.

Key Points: • A phishing test email offering a fake holiday caused outrage among healthcare workers. • The test was criticized for being insensitive during a time of high stress and burnout. • NL Health Services has apologized and is reviewing their approach to cybersecurity training.