sync: auto-sync from GURU-BEAST-ROG at 2026-07-06 10:55:23

Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-07-06 10:55:23

clients/valleywide/2026-07-06-phish-recipient-warning-draft.md

@@ -0,0 +1,42 @@
+# VWP phishing notification — draft warning to recipients
+2026-07-06. Send from a verified VWP account (or have VWP send). Review before sending.
+
+**Subject:** Important: Please disregard the "Invitation to Bid" email from our office
+
+---
+
+Dear valued partner,
+
+Earlier today, an unauthorized email was sent from our address
+(**orders@valleywideplastering.com**) with the subject **"Invitation to Bid: Municipal
+Mixed-Use Infrastructure Redevelopment."** This message did **not** come from Valley Wide
+Plastering — it is a phishing email sent without our authorization.
+
+If you received it, please:
+
+- **Do not** open any attachments or click any links in that email.
+- **Do not** reply to it or provide any information.
+- **Delete** it from your inbox.
+
+If you already clicked a link or entered any login information, we recommend you **change
+your email password immediately** and notify your IT provider as a precaution.
+
+We have already secured the affected account, and the issue has been resolved on our end.
+We sincerely apologize for any concern or inconvenience this may have caused.
+
+If you have any questions, or if you receive anything else that appears to be from us but
+seems suspicious, please contact us directly at **[PHONE]** rather than replying to any
+unexpected message.
+
+Thank you for your understanding,
+
+**[Name]**
+Valley Wide Plastering
+[phone] | [email]
+
+---
+
+*Notes for sender:* fill in [Name]/[PHONE]. Send from a known-good VWP mailbox (not orders@
+if you'd rather recipients not associate the reply with the compromised address, though
+orders@ is now secured). Known recipients so far (from bounce-backs; not exhaustive):
+stackct.com, ascentworks.com, LWSupply.com, camelothomes.com, truteam.com, willisroof.com.