June 17, 2024

It has been brought to our attention that parishes within the archdiocese have recently been victims of stolen check scams. Thieves have been breaking into both church mailboxes and USPS blue mail collection boxes, stealing checks, altering them, and then fraudulently cashing them at various banks. This is a national problem – the USPS reported 250,000 incidents of mail theft last year. Many stolen checks are put up for sale on the dark web for other criminals to purchase. All parishes should be on alert.

Prevent Check Fraud

The best way to prevent check fraud is to avoid making payments by check. If there is another way to make a payment, such as your bank’s online bill payment feature or via credit card, then use it. A credit card is preferable because it is easier and more convenient to dispute a transaction with your credit card than with other payment method.

How to Lower Your Risk if You Do Use Checks

If you must use checks, please take these precautions:

• When making out a check, write out the amount so the words fill out the line. For example: “Two hundred and fifty dollars and sixty-one cents.” This makes it more difficult for someone to alter it without washing off the ink. Also make sure the numeric amount fills the box on the far-right side of the check.
• Use permanent ink to prevent the check from being washed.
• Never write checks out to cash unless you intend for it to be used by anyone who comes in possession of that check.
• Sign your checks the same way every time so that your signature is more easily recognized by the bank when signatures are compared.
• Keep your checks in a secure, private place in your home (never keep blank checks in your wallet).
• Deposit mail in collection boxes as close to the indicated pickup time as possible — or, better yet, take it inside the post office for mailing.
• Get online regularly to scan your transactions for suspicious activity Make sure the amount that the check was cashed for matches the amount you wrote on it. Some banks’ apps allow you to pull up images of the cashed check.
• Report suspicious activity as soon as possible.

If You Are a Victim of Check Fraud Do the Following

• Contact your bank ASAP
• Notify the local police and your local postal inspection office
• Contact RCAB Parish Finance (617-746-5685) and the RCAB Office of Risk Management (617-746-5739)

May 21, 2024

The RCAB Information Technology Department (ITD) email system underwent a large phishing attack yesterday and we now have a report of a similar attack launched against a related entity. Accounts have been compromised and then utilized in additional attacks. The attacks aim to steal login credentials but there is evidence that suggests malware is being installed. This is yet to be confirmed. Compromised accounts are being harvested for contacts and most likely emails are being offloaded for future use.  

Please have your IT department or Managed Service Provider analyze incoming emails and if possible, block or delete these emails. Warn your user community as appropriate. Email filters are unlikely to identify and block these emails.

The attack comprises two emails. The first is meant to set your expectation to receive a Dropbox message. It would be sent from a real (and compromised) account – so you may recognize the senders name and even the email address. The second email has links to a legitimate Dropbox account but is intended to steal credentials. As noted, we are seeing signs that there may also be an associated malware compromise on computers that open the link.

Please be aware and wary of the following email sequence.

Email 1: “I attempted to send you the documents as attachments but encountered size limitations. Which is why I had to use Dropbox Application Secured Upload for enhanced security, the message is encrypted so you might need to login to view. Please review the documents in Dropbox and let me know if it works. “

Email 2: An official-looking email with a Dropbox logo that includes a link to a Dropbox file.

If you receive an email from someone you know sharing documents via Box, or Dropbox, etc., and via links, it is best to not open them. Remember, if it is unexpected, requires an immediate response, or is threatening, e.g., your account will be closed, this is likely a phishing attempt.

Reporting a Claim

Contact Alicia Gray at 781-664-3990, Alicia_gray@rcab.org.

April 2, 2022

The National Weather Service issued a High Wind Watch in effect from Wednesday evening (April 3) through Thursday afternoon (April 4). East winds of 25-25 MPH are expected, with gusts up to 60 MPH possible, in Eastern Norfolk, Suffolk, Eastern Essex, Barnstable and Eastern Plymouth counties.

In addition, a Coastal Flood Watch is in effect Thursday morning, April 4. One to two feet of inundation above ground level is possible in low-lying areas near shorelines and tidal waterways. Affected areas are: Eastern Essex, Suffolk, Eastern Norfolk, Eastern Plymouth, Barnstable, Dukes and Nantucket counties.

Shallow pockets of flooding up to one foot deep affects the lowest lying areas along the coast, including Morrissey Boulevard in Boston. Roads remain passable. Shallow pockets of flooding less than one foot deep affect more vulnerable coastal roads along the North Shore from Salem and Gloucester to Newburyport. Rough surf will likely cause some splashover onto coastal roads around the time of high tide. 

We urge you to make the following preliminary preparations:

• If you must travel, keep an extra flashlight, food, and water in your vehicle in case of an emergency.
• Prepare for potential floods. Have custodians check drains, grates and basins to ensure they are free of leaves and debris.Check to see if sump pumps are working.
• Prepare for wind damage. Some trees in our area may be more susceptible to high winds. Immediately inspect trees and bushes. Remove dead or rotting branches that could fall and cause injury or damage. Secure outdoor objects that could blow away or cause damage to people/property.
• Be prepared for potential power outagesfrom downed power lines caused by storm activity. Have an emergency supply kit on hand, including water, flashlight, extra batteries, a first aid kit and non-perishable food.
• If using a space heater, inspect it for safety – make sure it is functioning properly and that the cords are not frayed. Only use a space heater that automatically shuts off if it tips over. DO NOT USE EXTENSION CORDS WITH PORTABLE HEATERS – PLUG THEM DIRECTLY INTO THE WALL OUTLET.

Property Damage
If you experience property damage or injury because of the storm, report the claim immediately. Contact Alicia Gray at alicia_gray@rcab.org or go to https://rcabrisk.org/property-claim-report/.

February 22, 2024

Over the last several months, the Department of Homeland Security has issued warnings of increased hacking and phishing attacks aimed at Catholic entities. Recently, a number of these have been successful with at least three instances of ransomware significantly and disastrously impacting the operations and ministry work of major Catholic agencies.

Though every organization is subject to hacking, we see attacks following certain patterns – it appears that Catholic entities are, at this time, a particular focus.    

Please revisit your cyber security program. Your strategy to protect your assets and data needs to include clear policies on data handling, technologies for asset protection, and a cyber training program that ensures all staff recognize, or at least question, emails that could be vectors for infection.

Modern ransomware techniques delay the execution of ransomware until data, including Personal Identifiable Information (PII), has been exfiltrated or stolen. This stolen data is used to encourage the payment of a demanded ransom. Failure to do so exposes that data on the dark web. Currently there is no acceptable and full recovery from a successful ransomware attack. Your cyber security posture must include a proactive prevention strategy.

Endpoint Detection and Response (EDR) Solutions

The ORM strongly encourages all institutions to consider purchasing and installing Endpoint Detection and Response (EDR) software. There are several products on the market; however, our parishes are successfully utilizing CHECKLIGHT® by CISO Global. CHECKLIGHT® is an advanced cyber security tool that is easily installed on each office computer with a quick software download. If unusual activity is detected, as is the case when a virus attempts to infect a computer, CHECKLIGHT® stops the attack before it occurs. This response happens in just a few seconds, while simultaneously sending an alert (via text message and email) to your IT team, who can further address the issue.

In addition, every endpoint that has CHECKLIGHT® installed is enrolled in their warranty protection of the $250,000.

The program operates at the system process level and does not monitor or track specific use such as emails or web activity.

For a demo or more information on purchasing and installing CHECKLIGHT®, please contact Rob Hegedus at rob.hegedus@ciso.inc, phone: 757-635-6278.

Cybersecurity Best Practices

In addition, below are some recommendations for cyber security best practices. The list is not comprehensive but is provided to you so that you can speak to your IT Department or Managed Services Provider (MSP) to help question, test, and ensure cyber security.

• Establish clear policies for asset, information, and data protection.
• Mandate cyber security training for all administrative and faculty staff.
• Do not allow unsupported operating systems on servers and computers.
• Ensure all servers and computers are routinely patched and maintained.
• Maintain the network environment including firewalls, switches, Wi-Fi access points, etc.
• Develop an air-gapped backup solution that eliminates online or network access.
• Test backup solutions through a recovery exercise.
• Use an Endpoint Detection and Response (EDR) software.
• Implement a web filtering solution.
• Implement strong passwords and MFA (Multi-factor Authentication).
• Ensure all academic and administrative staff can recognize a phishing email.
• Engage an MSP to fill gaps in knowledge or expertise.
• Do not use volunteers for support.
• Do use volunteers for Technology Steering Groups and Committees.
• Engage a Cyber Security provider to perform a network and security audit on some regular basis.
• Any communication requesting or relating to financial transactions or information such as wire transfers, method of payment, or change in account numbers, should be verbally verified through a known contact name and number.

Reporting a Claim

If you suspect your data or systems have been compromised, immediately report the incident to Alicia Gray at Alicia_gray@rcab.org and your IT service provider, as well as law enforcement.

February 12, 2024

The National Weather Service issued a Winter Storm Warning in effect from 1:00 AM Tuesday, February 13, through Wednesday, February 14. Heavy snow is expected, with a total accumulation of 7 to 13 inches and winds gusting as high as 40 mph. Affected areas are: Portions of northern Connecticut, central, eastern, northeastern and western Massachusetts and northern Rhode Island.

Travel could be very difficult to impossible with snowfall rates of 1 to 2 inches per hour at times. Areas of blowing snow could significantly reduce visibility. The hazardous conditions will particularly impact the Tuesday morning commute.

Wet snow and gusty winds may result in power outages.

In addition, a Coastal Flood Warning is in effect from noon to 5pm on Tuesday. Two to three feet of inundation above ground level is expected in low-lying areas near shorelines and tidal waterways in the following counties: Suffolk, Eastern Norfolk, Eastern Plymouth, Barnstable, Dukes, and Nantucket.

Some vulnerable coastal roads become impassable around high tide. Flooding 1 to 2 feet deep affects some coastal roads and low-lying areas from Revere and Winthrop through Boston to Hull, Braintree, and Quincy. Splashover and debris may wash onto coastal roads when large waves occur. 

We urge you to make the following preliminary preparations:

• If you must travel, keep an extra flashlight, food, and water in your vehicle in case of an emergency.
• Prepare for wind damage. Some trees in our area may be more susceptible to high winds. Immediately inspect trees and bushes. Remove dead or rotting branches that could fall and cause injury or damage. Secure outdoor objectsthat could blow away or cause damage to people/property.
• Maintenance personnel should check facilities, ESPECIALLY UNOCCUPIED BUILDINGS, in the morning and evening each day. Check for frozen lines by making sure water is flowing in the faucets and toilets. If you believe a line is frozen, shut off the water supply until a plumber arrives.
• Be prepared for potential power outages from downed power lines caused by storm activity. Have an emergency supply kit on hand, including water, flashlight, extra batteries, a first aid kit and non-perishable food.
• If you lose heat and are unable to restore heat, shut off the water supply and drain the pipes. This will prevent water from freezing and bursting the pipes. If you are unable to drain the pipes, open the taps a little to allow water to trickle out. If you choose this option, please monitor the taps on a regular basis.
• If using a space heater, inspect it for safety – make sure it is functioning properly and that the cords are not frayed. Only use a space heater that automatically shuts off if it tips over. DO NOT USE EXTENSION CORDS WITH PORTABLE HEATERS – PLUG THEM DIRECTLY INTO THE WALL OUTLET.

SPACE HEATER SAFETY

During cold periods, it is tempting to use portable space heaters for extra warmth. PLEASE USE CAUTION. If using a space heater, inspect it for safety – make sure it is functioning properly and that the cords are not frayed. Only use a space heater that automatically shuts off if it tips over. DO NOT USE EXTENSION CORDS WITH PORTABLE HEATERS – PLUG THEM DIRECTLY INTO THE WALL OUTLET. Keep the heater at least three feet away from anything that can burn, such as paper, clothing, or furniture.

Reporting a Claim

If you experience property damage or injury as a result of the storm, report the claim immediately. Contact Alicia Gray at 781-664-3990, Alicia_gray@rcab.org. Again, for a full list of service vendors, go to: https://rcabrisk.org/vendors.

January 8, 2024

The National Weather Service issued a Flood and High Wind Watch in effect from Tuesday evening, January 9, through Wednesday afternoon, January 10. Flooding caused by heavy rain and snowmelt is possible in Massachusetts, Rhode Island, and portions of northern Connecticut.

In addition, southeast winds 30 to 40 mph with gusts up to 60 mph are expected in portions of eastern, northeastern and southeastern Massachusetts and northern and southern Rhode Island.

Excessive runoff may result in flooding of rivers, creeks, streams, and other low-lying and flood-prone locations. Creeks and streams may rise out of their banks. Flooding may occur in poor drainage and urban areas. Storm drains and ditches may become clogged with snow.

Damaging winds could blow down trees and power lines. Power outages are possible. Travel could be difficult, especially for high profile vehicles.

We urge you to make the following preliminary preparations:

• Prepare for wind damage. Some trees in our area may be more susceptible to high winds. Immediately inspect trees and bushes. Remove dead or rotting branches that could fall and cause injury or damage. Secure outdoor objects that could blow away or cause damage to people/property.
• Have custodians check drains, grates, and basins to ensure they are free of leaves and debris. Check to see if sump pumps are working.
• Shutter windows. If shutters are not available, close window blinds, shades, or curtains.

Be prepared for potential power outages from downed power lines caused by storm activity. Have an emergency supply kit on hand, including water, flashlight, extra batteries, a first aid kit and non-perishable food.

During and after the storm, be sure to inspect basements and roofs for leaks and flooding. In addition, inspect the grounds for weak or damaged tree limbs and have these removed immediately.

Property Damage
If you experience property damage or injury because of the storm, report the claim immediately. Contact Alicia Gray at 781-664-3990, alicia_gray@rcab.org or go to https://rcabrisk.org/property-claim-report/.

January 5, 2024

The National Weather Service issued a Winter Storm Watch in effect from Saturday afternoon, January 6, through late Sunday night, January 7. Heavy snow and high winds are possible. Total snow accumulations of 4 to 7 inches are expected. Winds could gust as high as 40 mph.

Affected areas are: Massachusetts, Suffolk, Eastern Norfolk and Northern Bristol Counties. In Rhode Island, Southeast Providence and Eastern Kent Counties.

Travel could be very difficult. Snow loading from heavy wet snow may lead to power outages.

There remains uncertainty in the exact track and intensity of the winter storm, therefore expect changes to later forecasts. Stay tuned to local weather stations.

We urge you to make the following preliminary preparations:

• Prepare for wind damage. Some trees in our area may be more susceptible to high winds. Immediately inspect trees and bushes. Remove dead or rotting branches that could fall and cause injury or damage. Secure outdoor objectsthat could blow away or cause damage to people/property.
• Maintenance personnel should check facilities, ESPECIALLY UNOCCUPIED BUILDINGS, in the morning and evening each day. Check for frozen lines by making sure water is flowing in the faucets and toilets. If you believe a line is frozen, shut off the water supply until a plumber arrives.
• Be prepared for potential power outagesfrom downed power lines caused by storm activity. Have an emergency supply kit on hand, including water, flashlight, extra batteries, a first aid kit and non-perishable food.
• If you lose heat and are unable to restore heat, shut off the water supply and drain the pipes. This will prevent water from freezing and bursting the pipes. If you are unable to drain the pipes, open the taps a little to allow water to trickle out. If you choose this option, please monitor the taps on a regular basis.
• If using a space heater, inspect it for safety – make sure it is functioning properly and that the cords are not frayed. Only use a space heater that automatically shuts off if it tips over. DO NOT USE EXTENSION CORDS WITH PORTABLE HEATERS – PLUG THEM DIRECTLY INTO THE WALL OUTLET.

Property Damage
If you experience property damage or injury because of the storm, report the claim immediately. Contact Alicia Gray at 781-664-3990, alicia_gray@rcab.org or go to https://rcabrisk.org/property-claim-report/.

A Nor’easter is a storm along the East Coast of North America, so called because the winds over the coastal area are typically from the northeast. These storms may occur at any time of year but are most frequent and most violent between September and April. Some well known Nor’easters include the New England Blizzard of February 1978 and the Boston snowstorms of January and February 2015. Past Nor’easters have been responsible for billions of dollars in damage, severe economic, transportation and human disruption, and in some cases, disastrous coastal flooding. Damage from the worst storms can exceed a billion dollars.

Precautions

• Check to see if sump pumps are working, and advise custodians to check all drains, grates and basins to ensure they are free of leaves and debris.
• Closely monitor NOAA weather radio or other local news outlets for official storm information and changes to the forecast.
• Some trees in our area may be more susceptible to wind damage due to stress from drought conditions. Immediately inspect trees and bushes. Remove dead or rotting branches that could fall and cause injury or damage.
• Be prepared for potential power outages as a result of downed power lines caused by storm activity. Have an emergency supply kit on hand, including water, flashlight, extra batteries, a first aid kit and non-perishable food.
• Secure outdoor objects that could blow away or cause damage to people/property.

Property Damage
If you experience property damage, immediately call the Office of Risk Management at 617-746-5743. For a list of service vendors, go to: https://rcabrisk.org/vendor

Tornadoes are nature’s most violent storms, with whirling winds that can reach 300 mph. Spawned from powerful thunderstorms, damage paths can be in excess of one mile wide and 50 miles long. Massachusetts residents have recently experienced the destruction of the Greater Springfield Tornado in June 1, 2011 which killed three, injured over 300 and destroyed or damaged over 1,400 homes and businesses. The infamous Worcester Tornado, which swept through Central Massachusetts in June 9, 1953, killed 94, seriously injured over 1,200 and over 4,300 homes and businesses destroyed or damaged.

Although tornadoes as severe as the Springfield and Worcester tornadoes are rare, they can and do happen here in Massachusetts. It is important that everyone familiarize themselves with what to look for and what steps to take if a tornado is forecast.

Tornado watches are issued for broad areas where conditions exist for the development of twisters, while tornado warnings are issued for highly localized areas where a tornado is imminent or has been detected on radar

Precautions

• Have custodians check drains, grates and basins to ensure they are free of leaves and debris.
• Check to see if sump pumps are working.
• Secure outdoor objects that could blow away or cause damage to people or property.
• Remove dead or rotting branches that could fall and cause injury or damage.
• Shutter windows. If shutters are not available, close window blinds, shades or curtains.
• Unplug appliances and other electrical items such as computers and turn off air conditioners. Power surges from lightning can cause serious damage.
• Use a battery-operated NOAA Weather Radio for updates from local officials.

If outdoors, avoid the following:

• Natural lightning rods, such as tall, isolated trees in an open area.
• Hilltops, open fields, the beach, or a boat on the water.
• Isolated sheds or other small structures in open areas.
• Anything metal, such as lawn mowers, motorcycles, golf clubs and bicycles.

After the storm, be sure to inspect basements and roofs for leaks and flooding. In addition, inspect the grounds for weak or damaged tree limbs and have these removed immediately.

Property Damage

Property damage caused by lightning, including damage caused to electrical appliances and wiring, is covered under the property and insurance program. If you experienced a lightning strike that caused damage, contact the Claims Manager immediately at 617-746-5743. If you have any questions, please call the Office of Risk Management at 617-746-5742.

A Blizzard Warning means severe winter weather conditions are expected or occurring. Falling and blowing snow with strong winds and poor visibilities are likely. This will lead to whiteout

conditions, making travel extremely dangerous. Do not travel. If you must travel, have a winter survival kit with you.  If you get stranded, stay with your vehicle.

• Closely monitor NOAA weather radio or other local news outlets for official storm information and changes to the forecast.
• Some trees in our area may be more susceptible to wind damage due to stress from drought conditions. Immediately inspect trees and bushes. Remove dead or rotting branches that could fall and cause injury or damage.
• Be prepared for potential power outages as a result of downed power lines caused by storm activity. Have an emergency supply kit on hand, including water, flashlight, extra batteries, a first aid kit and non-perishable food.
• Secure outdoor objects that could blow away or cause damage to people/property.

Roofs

If not cleared off, snow accumulations will add weight and stress to structures and contribute to leaky roofs once the snow begins to thaw. In many cases, roof ice dams can form, causing water build-up leading to interior damage. To minimize the risk of over-stressing a building roof due to accumulated or drifting snow, please take into consideration the following tips:

• If roof snow can be removed from the ground with the use of a snow rake (available at most hardware stores), do so. Use caution, as metal snow rakes conduct electricity if they come into contact with a power line.
• Try to avoid working from ladders, as ladder rungs tend to ice up. Snow and ice collect on boot soles and metal ladders.
• Remove snow in layers uniformly across the roof to prevent unbalanced loads that might cause collapse. Avoid making snow piles on the roof during the removal process.
• Large icicles can form on roof overhangs, but do not necessarily mean ice damming is occurring. Icicles overhanging doorways and walkways can be dangerous and should be carefully removed.
• Use care with snow removal equipment (shovels, ice spaces, snow blowers) to prevent roof cover damage. It is not necessary to clean completely down to the roof surface as long as melting snow and water can freely flow to the drains.
• Because snow is heavy and roofs and other surfaces may be slippery, all of the abovementioned actions should only be performed by able-bodied adults. Protective headgear and eye protection is recommended.

 Property Damage
If you experience property damage, immediately call the Office of Risk Management at 617-746-5743. For a list of service vendors, go to: https://rcabrisk.org/vendors