Official Indiana .gov email addresses are phishing residents

Colin Wood reports:

Indiana state agencies on Tuesday are warning residents to delete phony emails sent using official state government email addresses.

Phishing emails emanating from numerous departments — from the Department of Child Services to the Indiana Horse Racing Commission — fraudulently inform recipients of unpaid toll fees and warn of financial penalties or vehicle registration holds if they refuse to pay. The emails, which sign off with “Thank you, TxTag Customer Service,” include links to presumably malicious websites.

[…]

When asked how it was possible for a contractor the state no longer works with to compromise the state’s security, a technology office spokesperson explained in an email that “the compromised account resided in GovDelivery, and that was the system used to send the messages.”