Dear {{recipient_name}},

This notification is being sent to inform you that our records indicate you have clicked on simulated phishing links in {{click_count}} out of {{campaign_count}} recent security awareness campaigns conducted by the Vituity Information Security team.

Phishing remains the #1 attack vector for healthcare data breaches. Each click on a real phishing link could expose protected health information (PHI), compromise clinical systems, or enable ransomware deployment across our network.

Required Action: You are required to complete the following within 14 calendar days:

  1. Complete the Security Awareness Refresher Training module in KnowBe4
  2. Review the "Spot the Phish" quick-reference guide (attached or available on the InfoSec SharePoint)

If you believe any of these clicks were made in error or have questions about identifying phishing attempts, please don't hesitate to reach out to our team. We're here to help, not to penalize — our goal is to strengthen our collective security posture.

Thank you for your attention to this important matter.

Regards,
{{footer_team}}