We’re reaching out to inform you of a new cyber threat that’s currently targeting businesses through a method known as device code phishing. This scam allows attackers to gain access to accounts without needing passwords—even bypassing multi-factor authentication.

To ensure your data and our communications remain secure, we’re introducing an extra verification step for sensitive requests.

We kindly ask that you notify us by phone before we action any of the following:

• Document shares
• DocuSign requests
• Any login or access-related instructions

This quick phone confirmation helps us verify that the request is genuine and protects both your business and ours from potential compromise.

We appreciate your understanding and cooperation as we continue to strengthen our cyber safety measures. If you have any questions or would like more information, please don’t hesitate to reach out.

Warm regards,

Simmonds & Bristow