#34860 FW: Another Scam Email

Created from Lead: https://artichoke.shield.syncromsp.com/leads/33216806/convert

Good Afternoon Peet,

We received this attached email that seems to be a scam email. If you could look into this, please. Let me know if you have any questions.

Thank you,

Emily

Emily Hale

Office Coordinator

Missoula Economic Partnership

[email protected]

From: Drew Rieker <[email protected]>
Date: Tuesday, June 24, 2025 at 12:39 PM
To: Grant Kier (CEO) <[email protected]>
Cc: Casey Nimocks <[email protected]>, Emily Hale <[email protected]>
Subject: Another Scam Email

Hi Grant,

I hope the start of summer is treating you well. Today, I received the attached scam email. Or at least I believe it is a scam email very similar to the last one we dealt with a while back. We have not taken any action of course.

The email was sent to the  [email protected] address, which comes to me I guess. We don’t use that address for anything that I can recall, including processing payments as referenced in this email.

We wanted to make sure you were aware. I am not sure if this means anyone’s email was compromised, because it looks like it came from outside MEP. The email string accompanying it also looks fabricated, but references some current MEP activity and uses your [email protected] address. It may be worth contacting Artichoke about it.

Let us know if you want to touch base about this at all. Casey and I are in the office and available by phone or email.

Thanks,

Drew

Drew F. Rieker
CPA/ABV
JCCS

[email protected]
---------------------------------------------------------------

321 W. Broadway 4th Floor 4th Floor | Missoula, MT 59802
Office: [(406) 549-4148](callto:(406)%20549-4148) | Fax: (406) 549-3003 | Direct: (406) 542-8138
[www.jccscpa.com](http://www.jccscpa.com/)

[Book a meeting with Drew Rieker](https://outlook.office.com/bookwithme/user/[email protected]?anonymous&ep=plink)

DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. When addressed to our clients any opinions or advice contained in this email are subject to the terms and conditions expressed in the governing Junkermier, Clark, Campanella, Stevens P.C. client engagement letter. Please immediately contact the sender if you have received this message in error.

Emily,

finance@missoulapartnership is an M365 Group (MEP Finance Committee) with Nicole and Grant as owners. The membership is as follows:

[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]

If this M365 does not need to exist, it should be disabled and archived.

As for the phishing email, it was sent from "[email protected]" and originated outside of your Microsoft 365 tenant. I've reported it to MS and blocked the domain for 30 days.

Do you have any other questions?

Peet,

Great, thank you! The M365 Group is correct and needs to exist.

Best,

Emily

Emily Hale

Office Coordinator

Missoula Economic Partnership

[email protected]

From: Artichoke Support - Peet <[email protected]>
Date: Tuesday, June 24, 2025 at 2:44 PM
To: Emily Hale <[email protected]>
Subject: FW: Another Scam Email (message id: 96264968)

Edits made via Bulk Update Tool - see change log for this timestamp