Secretary Thomas Warns Businesses of Phishing Email Impersonating State Business Services Division
Press Releases
10/21/2026
(Hartford, Conn.) — Secretary of the State Stephanie Thomas is warning all Connecticut businesses to avoid a malicious email currently circulating that claims to be from the Office of the Secretary of the State's Business Services Division. The subject line is: “RE: Connecticut Office of the Secretary of the State, Business Services Division.”
Businesses should not respond to the email or open its attachments.
The email claims that a secure document has been shared with the recipient. It instructs users to download an attached file and enter a provided access code to unlock the document through a purported "DocuSafe Secure Portal.”
This type of phishing attack can trick users into revealing sensitive information to cybercriminals, including login credentials, or expose their devices to malware.
“Cybercriminals are getting more sophisticated, and it’s critical that businesses stay alert,” Secretary Thomas said. “If something feels off, trust your instincts and verify before you click.”
How to Identify and Prevent Attacks
Unfortunately, our Office cannot prevent these types of attacks. Our best defense is an informed and vigilant public.
- Official Emails: Emails from the Office of the Secretary of the State will always come from an email address ending in @ct.gov.
- Verify the Sender: All standard email applications allow recipients to see the real sender by hovering over or clicking on the “from” address. If this process reveals an address that is not @ct.gov, the email does not come from the state and should not be trusted.
- Be Careful with Lookalike Domains: Hackers are sophisticated. While checking the email address is essential, you must remain suspicious even if the email appears to be official. Criminals can trick you by using a very similar-looking address (like @cct.gov or @ct-gov.org), hoping you won't notice the small difference.
Key Security Reminders
- Do not respond to, click any links in, or open attachments from an email you suspect is malicious.
- All official business filings can be accomplished by going directly to Business.CT.gov and logging in. If you are suspicious of a link, even in an email from @ct.gov, do not click it. While the Business Services Division may include quick links for convenience, it is never necessary to click a link to make a business filing.
- Never give your Business.CT.gov credentials to anyone and turn on Multi-Factor Authentication (MFA) for added security.
Subscribe to Business News for Monthly Resources
If you’d like more information, resources, and alerts like this, click here to sign up for the Secretary of the State’s monthly Business News e-newsletter.
# # #
Contact: Matthew Clyburn
Matthew.Clyburn@ct.gov
(959) 274-6725
Legal Disclaimer:
EIN Presswire provides this news content "as is" without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.
