Which action is appropriate when someone impersonates your agency to obtain information?

Which action is appropriate when someone impersonates your agency to obtain information?

• A. Do not share information and report the incident to Marketplace Call Center
• B. Provide information to verify identity
• C. Share your records
• D. Ignore

Answer: (A)

When someone impersonates your agency to get information, the priority is to protect sensitive data and alert the proper channels. The best action is to refrain from sharing any information and report the incident to the Marketplace Call Center. This prevents sensitive details from being disclosed and starts an official security response so the caller can be verified and the situation investigated. Providing information to verify identity is risky because you don’t know if the caller is legitimate; social engineers try to exploit that to obtain access or data. Sharing records or personal data would increase exposure and potentially harm you or others. Ignoring the incident doesn’t address the threat and can allow fraud to continue. By reporting promptly, you enable the right checks and safeguards to be put in place.

When someone impersonates your agency to get information, the priority is to protect sensitive data and alert the proper channels. The best action is to refrain from sharing any information and report the incident to the Marketplace Call Center. This prevents sensitive details from being disclosed and starts an official security response so the caller can be verified and the situation investigated.

Providing information to verify identity is risky because you don’t know if the caller is legitimate; social engineers try to exploit that to obtain access or data. Sharing records or personal data would increase exposure and potentially harm you or others. Ignoring the incident doesn’t address the threat and can allow fraud to continue. By reporting promptly, you enable the right checks and safeguards to be put in place.