An email arrives from a referring dentist, laboratory, or colleague: “You have received an encrypted message.” In a busy orthodontic practice, opening it feels routine. But criminals can send convincing messages from compromised accounts. A familiar sender and a “secure” label do not guarantee safety. 

Clicking the link can download a screen-sharing application instead of opening a document. Once launched, that application can give criminals remote control of the computer, potentially allowing them to steal patient information, install malware, and use the compromised computer to attack other systems on your practice’s network. The scariest part of this attack is that it almost always bypasses detection by your firewall and anti-virus software.

Take a Technical Time-Out: pause, inspect, verify, and report. Were you expecting the document? Call the sender using a trusted number—not contact information in the email. Never run unexpected software to view a message. Report suspicious emails to your IT team or provider immediately, especially if you clicked a link or opened a downloaded application. A brief pause can protect your practice and patients.