Reglith
← All regulatory updates

New Hampshire Banking Department · NH

New Hampshire Security Team Scam of the Week: Patient portal scams

September 21, 2026

Summary

This New Hampshire Banking Department alert warns mortgage industry staff about a phishing scam targeting patient portals, where fake emails and sign-in pages trick users into surrendering credentials and running malware-installing commands. All mortgage entities should treat unsolicited emails with embedded buttons or verification prompts as suspicious and verify directly through official channels. The guidance reinforces basic cybersecurity hygiene that applies across lender, broker, and servicer operations.

AI-generated summary · Sep 22, 2026. Verify with your compliance counsel before acting.

How this was generated

We record the exact prompt, model, and output for every AI response so it can be audited for accuracy.

"Scam of the Week" from the State of New Hampshire Security Team at the Department of Information Technology:

Imagine opening an email that appears to be from your patient portal, telling you your test results are ready. You select the button in the email and land on a sign-in page that looks just like the real one, so you enter your email address and password. Then a pop-up window appears, stating that an "AI-powered review" found problems with your blood work. To see more, the page says you must complete a quick verification step.

Unfortunately, this email is actually a phishing scam! By signing in, you handed your login details straight to cybercriminals. The "verification" step might ask you to press a key combination, then paste and run a command. If you do, you could install malware on your device as well!

Follow these tips to avoid falling victim to this phishing scam:

  • Open your patient portal through the official app or your healthcare provider's website. Don't select a button in an email about test results
  • Never press key combinations, paste commands, or download files because a website tells you to. Real patient portals don't work that way
  • Whichever health service you use, and wherever you live, confirm surprising results by contacting your provider directly through a phone number you know is real

Source: https://www.banking.nh.gov/news-and-media/new-hampshire-security-team-scam-week-patient-portal-scams

Common questions

What does "New Hampshire Security Team Scam of the Week: Patient portal scams" cover?
This New Hampshire Banking Department alert warns mortgage industry staff about a phishing scam targeting patient portals, where fake emails and sign-in…
Which agency issued this update?
This update was issued by New Hampshire Banking Department.
When was it published?
It was published on September 21, 2026.

Related updates

Stop missing the rule that costs you a loan.