Stay up-to-date on the companies, people and issues that impact businesses in Syracuse, Central New York and beyond.
VIEWPOINT: How to recognize a health-care scammer when you hear one
When you hear about the risk of identity theft today, most of the time it’s in the context of cybersecurity — scammers hacking into people’s email or online bank accounts to steal private information such as credit card numbers and passwords. While the biggest risks may have moved online, identity theft over the phone is […]
Become a Central New York Business Journal subscriber and get immediate access to all of our subscriber-only content and much more.
Click here to purchase a paywall bypass link for this article.
When you hear about the risk of identity theft today, most of the time it’s in the context of cybersecurity — scammers hacking into people’s email or online bank accounts to steal private information such as credit card numbers and passwords.
While the biggest risks may have moved online, identity theft over the phone is still alive and well in New York state and across the country.
These fraudsters are after more than just credit card or bank information. The Washington, D.C.–based Coalition Against Insurance Fraud says health-care-related scams are by far the most common type of insurance fraud in the United States, with billions lost each year to a variety of false reimbursement and billing schemes. Medicare fraud alone is estimated to cost $60 billion every year.
According to the U.S. Department of Health and Human Services and state consumer protection offices, these are the common COVID-19 scams to look out for:
Text scams
Many people are receiving messages from people posing as government agencies falsely advertising new COVID-19 vaccines, cures, or tests. Do not click on links in texts related to the virus. Instead, check cdc.gov/coronavirus for current information.
Robocall scams
These automated calls are “phishing” not just for bank or credit-card information, but also for Social Security numbers and health plan ID numbers to use in other types of fraud.
Phone scammers often prey on people through various guises, including:
• The “health care representative”: The caller will claim to be a representative of your health plan, such as your Medicare Advantage or Medicare supplement plan.
• The “government representative”: A caller might claim to be working for the government, saying he or she is calling from Medicare, for example, and is authorized to collect fees or penalties over the phone to set right some supposed problem with the person’s Medicare account. Medicare does not make unsolicited phone calls.
• Medical discount plans masquerading as health insurance: Sometimes the caller will offer medical discount plans that are said to be the equivalent of insurance. In reality, most are memberships in a “club” that claims to offer reduced prices from certain doctors and pharmacies, as well as on some procedures.
• The “health insurance counselor”: This fraudster will offer help navigating the health-insurance marketplace for a fee, capitalizing on people’s confusion about the state-based health exchanges created through the Affordable Care Act. This sort of assistance is indeed available and is legitimate, but the people who offer it – also known as “navigators” – aren’t allowed to charge for their services.
In addition to knowing some of the tell-tale signs the person on the other end of the line is a fraudster, other ways to help avoid health care phone scams, include:
• Protect your personal information – including details about your Medicare coverage. Guard your health care insurance card number just like you would your credit card number, providing it only to health care providers at the time you are seeking services.
• One of the leading Medicare health scams involves fraudsters filing false claims for durable medical equipment such as wheelchairs, scooters, walkers and nebulizers. It’s illegal for a medical supplier to make an unsolicited phone call to people with Medicare. So, if you receive a call to buy medical equipment that your doctor hasn’t ordered, hang up.
• Another health scam that’s becoming increasingly common is designed to take advantage of people who accidentally misdial a toll-free number (a number starting with 1-800, 1-866, or 1-877). In these scenarios, scammers purchase a toll-free number that is just one digit off from a legitimate number. When people mistakenly dial that number, they think they’re speaking with a call-center agent from the company they were attempting to reach. Instead, they’re on the line with a scammer.
• Carefully monitor your statements from Medicare or your health plan for any claims for services or supplies that you did not receive.
• If any part of a phone conversation makes you uneasy, hang up and call the company or organization the person claims to be representing, using either the phone number on your health plan ID card, if the person claimed to be calling from your health-insurance company, or the toll-free number on the organization’s website.
• Report suspicious activity to local police, the state attorney general, the Centers for Medicare and Medicaid Services, or the Federal Trade Commission. Doing so can help protect others from falling prey to the fraudster’s schemes.
Dr. Don Stangler is chief medical officer at UnitedHealthcare of NY (UHC.com)

Quanterion offers resources during Cybersecurity Awareness Month
UTICA, N.Y. — Quanterion Solutions, Inc. has launched a cybersecurity resource program in conjunction with October being Cybersecurity Awareness Month, a global initiative to promote cybersecurity awareness and best practices. As a “registered champion” of the event, Quanterion says it is providing resources throughout the month for businesses and consumers and raising awareness of
Become a Central New York Business Journal subscriber and get immediate access to all of our subscriber-only content and much more.
Click here to purchase a paywall bypass link for this article.
UTICA, N.Y. — Quanterion Solutions, Inc. has launched a cybersecurity resource program in conjunction with October being Cybersecurity Awareness Month, a global initiative to promote cybersecurity awareness and best practices.
As a “registered champion” of the event, Quanterion says it is providing resources throughout the month for businesses and consumers and raising awareness of cyber threats.
The National Cyber Security Alliance and the Cybersecurity and Infrastructure Agency (CISA) of the U.S. Department of Homeland Security are leading the month-long event.
“Hackers are increasingly driving sophisticated attacks that take advantage of new technologies and threaten the security of individuals and businesses,” John Reade, director of information systems at Quanterion, said in a release. “This Cybersecurity Awareness Month, Quanterion Solutions is pleased to work alongside CISA, the National Cybersecurity Alliance, and other organizations to raise awareness about the importance of Internet safety.”
The initiative highlights emerging cybersecurity challenges and shares resources to protect devices, accounts, digital identities, and data. This year’s theme is, “It’s easy to stay safe online,” focuses on recognizing and reporting phishing attacks, using password managers, enabling multi-factor authentication, and updating devices to patch security issues.
Quanterion’s resources are available online at www.quanterion.com/cyber-awareness-month-2022-resources/.
Utica–based Quanterion is a small business that says it specializes in analytical services, products, and training across a number of technical disciplines including reliability, maintainability & quality, information systems, technical information centers, software systems & development, cybersecurity, knowledge management, critical infrastructure protection, and homeland defense and security.
Cybersecurity Awareness Month is designed to engage and educate public and private-sector partners to raise awareness about cybersecurity to increase the resiliency of the nation’s critical information systems. Other efforts by the nonprofit National Cybersecurity Alliance include Data Privacy Week in January and CyberSecure My Business, which offers webinars, web resources, and workshops for businesses. More information is available at staysafeonline.org.

SBA’s inaugural Small Business Cyber Summit set for Oct. 26
The U.S. Small Business Administration (SBA) will host a free, virtual national Cyber Summit on Oct. 26. The SBA Cyber Summit will help introduce American small businesses to tools, tips, and resources to “bolster” their cybersecurity infrastructure. It’ll also explore new trends and challenges that entrepreneurs are increasingly facing. This cybersecurity forum will be a
Become a Central New York Business Journal subscriber and get immediate access to all of our subscriber-only content and much more.
Click here to purchase a paywall bypass link for this article.
The U.S. Small Business Administration (SBA) will host a free, virtual national Cyber Summit on Oct. 26.
The SBA Cyber Summit will help introduce American small businesses to tools, tips, and resources to “bolster” their cybersecurity infrastructure. It’ll also explore new trends and challenges that entrepreneurs are increasingly facing.
This cybersecurity forum will be a first for the agency, SBA Administrator Isabella Casillas Guzman, said in announcing it Sept. 22.
“America’s small businesses are pivoting to digital technologies and online strategies at historic rates to reach new customers and improve operational efficiencies, but that pivot has also exposed them to significant new threats from cyberattacks,” Guzman said in a release. “Our SBA team has mobilized to support them against these potentially disruptive threats with cybersecurity resources and trainings across our resource partner networks, as well as through our recently launched Small Business Digital Alliance. Launching the SBA’s first annual Cybersecurity Summit will help us build on that work and ensure America’s 33 million small businesses and innovative startups can pivot safely online and grow resilient businesses.”
Registration for the event is open to all and free. Those interested can sign up through this link: www.bit.ly/SBACyberSummit.
About the event
The inaugural SBA Cyber Summit will include various speakers, including Guzman, SBA Associate Administrator Mark Madrid, SBA resource partners, Small Business Development Centers, the Cybersecurity and Infrastructure Security Agency (CISA), the FBI, business chambers, state government partners, experts from the public/private sectors, major technology platforms, and “award-winning” business coaches, the SBA said.
“Comprised of digestible and compact segments,” attendees will have the opportunity to network and learn more about practical tips, problem-solving strategies, industry trends, threat avoidance, and small-business testimonials to help small-business owners defend themselves against cyberattacks, the SBA said.
Cyberattacks are a “growing threat” to small businesses and the U.S. economy. The SBA cites the FBI’s Internet Crime Report as indicating the cost of cybercrimes against the small-business community reached $2.4 billion in 2021.
Small businesses are “attractive targets” because they have information that cybercriminals want, and they “typically lack” the security infrastructure of larger businesses.
According to an SBA survey, 88 percent of small-business owners felt their company was vulnerable to a cyberattack. Yet many businesses cannot afford professional IT solutions, have limited time to devote to cybersecurity, or do not know where to begin, the SBA noted.
VIEWPOINT: Businesses & employees must stay alert to changing fraud tactics
October is cybersecurity month, and like the masks people wear at Halloween, perpetrators of online fraud frequently change how they look. It’s important to remain vigilant and make sure your employees are familiar with new fraud tactics. A tactic that is increasingly used is what is known as “remote access scamming.” With remote-access scams, fraudsters
Become a Central New York Business Journal subscriber and get immediate access to all of our subscriber-only content and much more.
Click here to purchase a paywall bypass link for this article.
October is cybersecurity month, and like the masks people wear at Halloween, perpetrators of online fraud frequently change how they look. It’s important to remain vigilant and make sure your employees are familiar with new fraud tactics.
A tactic that is increasingly used is what is known as “remote access scamming.” With remote-access scams, fraudsters are hoping to trick you or your employees into providing them with the information they need to gain access to your systems, especially your online- banking credentials. One example of a common remote-access scam starts with a phone call from someone who claims to have identified a computer problem with your system.
Sometimes they’ll claim to be from the IT department, or from a large well-known technology or software company, stating that they need your help to fix a problem. What they are really trying to do is gain control of your system, using your access and passwords.
A recent — and diabolical — twist is that some fraudsters are saying that they have detected an issue with your business banking account and they’re transferring you to the Fraud Department to “help fix” the issue. Nothing could be further from the truth; they are using your fear of fraud to gain access.
Here are some red flags that you should be aware of, and make sure your employees are familiar with as well:
• Unsolicited tech support calls — an incoming call from “tech support” should be treated with suspicion, especially if all of your devices are working properly. If you haven’t called for tech help and someone calls you, put your guard up immediately.
• Pop-ups directing you to call a number to address a detected virus — this is a method to have you initiate the call, and have you provide them with the details that provide remote access to your computer.
• Gift-card requests — this should be a dead giveaway that something is wrong or not above-board. No legitimate company will ever ask for you to purchase a gift card and then provide the information to someone over the phone.
• High-urgency requests — any demands that there is no time to waste, or other indicators that an issue is urgent should be treated with high levels of suspicion. What criminals are hoping for here is that you — or your employees — will react without thinking about the request or ask any questions about its legitimacy.
• Requests for one-time PINs — one-time PINs (OTP) are a key fraud-prevention measure and should never be circumvented. Never provide an OTP to anyone who calls and requests one.
• Requests to download software — any request to download software onto your computer, especially to “fix” a virus or other issue from someone who has called you should be treated as potential fraud.
• Requests for any other sensitive information — if a request seems weird or suspicious, pay attention to your instincts. Providing funds for a lawyer or legal fees over the phone is strange. A sudden family emergency that requires over-the-phone payment, but the caller isn’t someone you know, is also strange. Requests to mail cash — strange. Someone saying they are from your bank but asking you to provide them with digital banking credentials — very suspicious. Treat any of these scenarios as having a high potential for fraud.
It’s critically important that your employees are aware of these types of scams, because fraudsters will frequently target people who are expected to respond quickly to requests from company officials. It’s called “spear-phishing” and it’s designed to prey upon rank-and-file employees. In other words, criminals are hoping that your employees will be too scared or too intimidated by a request from “the boss” to say no.
If you ever have a reason to suspect that you’ve fallen victim to a remote-access scam, immediately call your financial institution’s customer-service team. Have your systems professionally cleaned and change all of your passwords and login credentials.
One of the most important things you can do as a leader in your organization is to make employees feel comfortable to say “no,” and to stop, think, and question requests. You would rather have them say “no” to the CEO than “yes” to an online criminal.
Terra Carnrike-Granata is senior VP and senior director of information security at NBT Bank, where she designs and implements sophisticated controls to prevent loss and mitigate risk, while also developing innovative ways to educate consumers and businesses on cyberthreats.

Amazon plans to hire 700 in the CNY region for full-, seasonal, and part-time positions
A range of roles — from packing and picking to sorting and shipping — are available to applicants from all backgrounds and experience levels, per

Binghamton young professional summit planned for Oct. 13
The theme for this year’s conference is “Moving Mountains,” and the hybrid event offers a virtual attendance option as well as the traditional in-person conference.

SUNY Poly, UAlbany receive research grant for aging and cancer study
The research, led by Andre Melendez, interim dean of SUNY Poly’s College of Nanoscale Science and Engineering (CNSE), and Thomas Begley, associate director of the

Proposed 2023 Oneida County budget has no tax hike
UTICA, N.Y. — Oneida County Executive Anthony J. Picente, Jr. presented to the Oneida County Board of Legislators his proposed $493 million 2023 budget that

Micron Technology CEO says the Clay semiconductor plant will help grow U.S. memory production
SYRACUSE, N.Y. — Micron Technology Inc. (NASDAQ: MU) CEO Sanjay Mehrotra says an “investment of this scale” is simply not possible without “significant” government and

Utica Zoo workers seek to unionize
UTICA, N.Y. — Workers at the Utica Zoo recently began organizing to form a union, according to a press release from the Civil Services Employees
Stay up-to-date on the companies, people and issues that impact businesses in Syracuse, Central New York and beyond.