HARBORLINE FOODS

ENTERPRISE CLOUD SOLUTIONS GROUP · MANAGED IT & SECURITY

Harborline Foods
Security Report

Sources: BullPhish ID + DefensX + Proofpoint
Prepared by: ECSG Security Team

Executive Summary

USERS TESTED

Facebook — Recovery Code simulation

How many employees received the simulated phishing email this month.

CLICKED THE LINK

23% of population

Employees who clicked the fake link. In a real attack, this is exactly where a hacker would have gotten in.

FULLY TRAINED (BOTH COURSES)

100% completion rate

Employees who finished both required security-awareness courses.

EXECUTIVE / FINANCE EXPOSURE

Leadership roles that clicked

The highest-risk group — leaders and finance staff usually have access to money or sensitive data.

Phishing Simulation — Funnel

Facebook - Recovery Code - Harborline #3 · August 27th, 2026 at 9:00 AM EDT

Response funnel

Every employee sent the simulated email, and how far they went

Reads top to bottom: everyone who got the email, then who opened it, then who actually clicked the dangerous link.

Sent

61 · 100%

Email Opened

29 · 48%

Clicked Link

14 · 23%

Outcome share

Distribution of final status per user

Same data as the funnel on the left, shown as a share of the whole group.

Training Compliance

Two assigned courses

Course 1

Phishing-Brand Fraud & Spoofing - Harborline #3 · July 13th, 2026 at 9:00 AM EDT

Teal means finished. Other colors mean the employee started the course but didn't complete it, or ignored it entirely.

Course 2

Malware Awareness - Harborline #3 · August 13th, 2026 at 9:00 AM EDT

Teal means finished. Other colors mean the employee started the course but didn't complete it, or ignored it entirely.

Overall completion rate distribution

Per-user completion rate across both courses combined

Shows how many employees are fully done (100%), halfway (50%), or haven't started (0%) their training.

Full Roster

Search, filter, and identify who needs follow-up

The complete list of employees with their individual results. Use the search box or filters below to look up a specific person.

Name	Position	Phishing Outcome	Completion	Course 1	Course 2
Priya Brennan	Office Manager - Boston	Clicked Link	100%	Completed	Completed
Daniel Castellano ★	CFO	Clicked Link	100%	Completed	Completed
Sofia Lindqvist	Customer Support	Clicked Link	100%	Completed	Completed
Hannah Delgado ★	CEO	Clicked Link	100%	Completed	Completed
Caleb Thornton	Employee	Clicked Link	50%	Completed	Email Opened
Leah Vance	HR	Clicked Link	50%	Sent	Completed
Gabriel Pemberton	Executive Assistant	Clicked Link	100%	Completed	Completed
Ruby Radcliffe	Account Development Specialist	Clicked Link	100%	Completed	Completed
Victor Stroud	Employee	Clicked Link	50%	Email Opened	Completed
Lena Bramwell	IT Coordinator	Clicked Link	100%	Completed	Completed
Brooks Marlow	Employee	Clicked Link	50%	Sent	Completed
Lila Upton	Employee	Clicked Link	100%	Completed	Completed
Silas Corliss	Employee	Clicked Link	0%	Sent	Sent
Wes Emery	Employee	Clicked Link	0%	Sent	Sent
Marcus Okafor	Regional Sales Manager - Texas	Email Opened	50%	Email Opened	Completed
Ethan Moreau	HR Specialist	Email Opened	100%	Completed	Completed
Grace Harlow ★	Operations Director	Email Opened	100%	Completed	Completed
Chloe Abernathy	Receiving	Email Opened	0%	Email Opened	Email Opened
Adrian Sinclair	Regional Sales Manager - Florida	Email Opened	0%	Email Opened	Email Opened
Miles Garrick	Purchasing Manager	Email Opened	0%	Sent	Sent
Clara Ellery	Product Manager	Email Opened	100%	Completed	Completed
Theo Quinlan ★	VP Creative	Email Opened	100%	Completed	Completed
Paige Valdez	Regional Sales Manager - South West	Email Opened	50%	Completed	Email Opened
Rafael Winslow	Employee	Email Opened	0%	Email Opened	Email Opened
Tessa Yardley	Employee	Email Opened	0%	Sent	Sent
Vivian Dunmore	Employee	Email Opened	50%	Completed	Email Opened
Derek Osborne	Employee	Email Opened	0%	Sent	Sent
Naomi Wakefield	Employee	Email Opened	0%	Sent	Sent
Quentin Ashby	Employee	Email Opened	0%	Email Opened	Email Opened
Olivia Whitfield	Culinary Ambassador	Sent	100%	Completed	Completed
Lucas Nakamura	Employee	Sent	0%	Sent	Sent
Owen Fairbanks	Employee	Sent	50%	Completed	Sent
Maya Ashford ★	VP Retail	Sent	0%	Sent	Sent
Isabel Kowalski	Controller	Sent	100%	Completed	Completed
Nathan Mercer	Maintenance	Sent	0%	Sent	Sent
Nora Calloway	Store Operations	Sent	0%	Email Opened	Sent
Julian Rinaldi ★	SVP Marketing	Sent	0%	Sent	Sent
Ava Hollis	Office Manager - Chicago	Sent	50%	Completed	Sent
Simon Montague	Regional Sales Manager - West Coast	Sent	50%	Completed	Email Opened
Elena Prescott ★	SVP Sales	Sent	0%	Email Opened	Email Opened
Iris Tolliver	Employee	Sent	0%	Sent	Sent
Felix Underwood	Production Supervisor	Sent	100%	Completed	Completed
Hugo Zeller	Employee	Sent	50%	Completed	Sent
Oscar Crane	Employee	Sent	0%	Sent	Sent
Dominic Easton	Employee	Sent	0%	Sent	Sent
Stella Farrow	Employee	Sent	0%	Opened	Opened
Aaron Gallardo	Employee	Sent	0%	Sent	Sent
Jade Haines	Retail Manager	Sent	100%	Completed	Completed
Shipping	Employee	Sent	0%	Sent	Sent
Colin Ivers ★	Sales and Marketing Coordinator	Sent	100%	Completed	Completed
Mira Jessup	Employee	Sent	0%	Sent	Sent
Jonah Kendrick	Employee	Sent	50%	Completed	Sent
Alana Lowell	Employee	Sent	0%	Sent	Sent
Celeste Northcott	Employee	Sent	0%	Sent	Sent
Fiona Pruitt	Employee	Sent	0%	Sent	Email Opened
Graham Ramsey	Employee	Sent	0%	Sent	Sent
Ingrid Sutter	Employee	Sent	0%	Sent	Sent
Kieran Talbot	Employee	Sent	50%	Completed	Sent
Mateo Vickers	Employee	Sent	0%	Sent	Email Opened
Rosa Blackwood	Employee	Sent	0%	Sent	Sent
Tara Draper	Employee	Sent	0%	Sent	Sent

Showing 61 of 61 employees · ★ = leadership / finance role

Cyber Resilience Summary

CYBER RESILIENCE SCORE

724 ▲1

ELEVATED RISK · benchmark 800/850

An overall grade (300–850) for how well-protected the company is day-to-day. Higher is better.

WEAKEST CATEGORY

Social Engineering Safety

The area that needs the most attention this month.

USERS FLAGGED

10 / ?

Appear on the Weakest Users report

Employees whose behavior puts the company most at risk — good candidates for a quick reminder or extra training.

LOW-REPUTATION EXTENSIONS

Flagged by browser telemetry

Browser add-ons employees installed that are known to be risky or untrustworthy.

For Harborline Foods, this month's Cyber Resilience Score stands at 724. This score shows a steady position compared to the previous month. Despite this stability, there remains a gap between the current score and our benchmark resilience score of 800/850 and each category at least 90/100. As such, for Harborline Foods, there is a clear need for focused improvement. It's essential to understand and act on these insights to elevate the cyber defense. A continuous engagement with our actionable intelligence will be pivotal in driving forward resilience efforts.

Cyber Resilience Score

300 (critical) – 850 (optimal) · benchmark 800/850

Think of this like a speedometer for company-wide cyber risk. A needle in the red or orange zone means there's real room to improve.

724

ELEVATED RISK

300560700750830850

Main Attack Vectors — Resilience Scores

Previous month vs. current · dashed line = desired safety level (90)

Compares this month to last across four risk areas. Bars reaching the dashed line are meeting the target.

Category Breakdown & Recommendations

Plain-language detail on what's driving each score above, plus specific, concrete fixes IT can act on.

81 ▲2 · higher is better

Password Hygiene

Recommendation: Weak passwords are used on 47 websites including login. live. com, www. fedex. com, www. ups. com, www. dropbox. com, and a local printer admin page.
Recommendation: Breached password detected for 50 websites including www. linkedin. com, www. adobe. com, id. ups. com, www. docusign. net, and a cloud accounting portal. We strongly recommend you to change them with stronger ones and never use the same password for multiple services.
Information: During this timeframe, users put their passwords on 33 new sites, including a payroll portal, a shipping carrier portal, a supplier portal, a benefits site, and a travel booking site. Notably, weak passwords were also identified on 12 of these sites, including a banking site, a local network device, a vendor portal, and a benefits site.

53 no change · higher is better

Social Engineering Safety

Recommendation: Frequent visitors tend to spend significant time on social media platforms such as www. facebook. com, www. instagram. com, and www. linkedin. com. On the other hand, infrequent visits are noted on sites like x. com, reddit. com, www. youtube. com, and www. tiktok. com. Given these patterns, users should manage online activities efficiently, prioritizing productivity over excessive social media use.

80 no change · higher is better

Malware Safety

Recommendation: Users downloaded 3files that are considered risky, including websites an AI note-taking site, www. adobe. com, and a company SharePoint site, and files AI_Notepad_Setup. exe, Acrobat_Setup. exe, and Shared_Files. zip.
Recommendation: File transfer protection is active in the policies without mime checks. Enabling mime type checks is recommended for better insight into browserfile uploads and downloads.

88 ▼1 · higher is better

Sensitive Data Safety

Recommendation: Users followed a link to a known high - risk web page 14 times, including links to ib. adnxs. com, secure. adnxs. com, and aa. trkn. us. DefensX has blocked them.

For the full set of recommendations and auto-interpreted logs and events, log in to the DefensX backend and switch to the Reporting section.

Weakest Users & Browser Extensions

Weakest Users Report

Per-user scores across the four resilience categories

These employees scored lowest overall — good candidates for extra training or a one-on-one reminder.

Name	Password Hygiene	Social Engineering	Malware Safety	Sensitive Data
Shipping shipping@harborlinemarket.example	33	35	83	96
Priya Brennan p.brennan@harborlinemarket.example	53	51	81	84
Silas Corliss s.corliss@harborlinemarket.example	71	46	62	89
Simon Montague s.montague@harborlinemarket.example	72	46	77	84
Gabriel Pemberton g.pemberton@harborlinemarket.example	58	64	83	91
Chloe Abernathy c.abernathy@harborlinefoods.example	74	46	82	88
Yara Fenwick y.fenwick@harborlinemarket.example	63	Not Measured	83	83
Miles Garrick m.garrick@harborlinemarket.example	74	55	83	88
Hugo Zeller h.zeller@harborlinemarket.example	77	49	78	91
Ava Hollis a.hollis@harborlinemarket.example	84	46	Not Measured	85

Browser Extensions — Low Reputation

2 flagged extensions

These browser tools were flagged as risky or untrustworthy — worth asking IT to review or remove them.

2 D Anime Landscape 2 D Anime background, Illustration.

LOW

Scribe: AI Documentation, SOPs & Screenshots Auto - generate step - by - step guides, just by clicking record. Save your team 20 + hours / month vs. video and text tutorials.

LOW

Email Threat Protection

ALL INBOUND MESSAGES

39,293

Processed by Proofpoint Essentials

Every email that tried to reach a Harborline inbox in the last 30 days.

BLOCKED BY PROOFPOINT

8,962

Connection, spam, advanced threats & virus

Emails automatically stopped before any employee could see them — spam, scams, and viruses.

CLEAN, DELIVERED TO INBOX

30,455

Of which 388 were later flagged

Emails that were considered safe and made it through to employees.

OUTBOUND MESSAGES BLOCKED

Outbound protection, last 30 days

Emails Harborline tried to send out that got stopped — often a sign of a compromised account or a mistake.

Blocked by Proofpoint Essentials

Breakdown of inbound messages blocked

What kind of threat each blocked email was — most are usually plain spam.

Flagged after delivery

Of the clean-delivered emails, these were later categorized as risky

A handful of emails looked safe at first but were flagged later. A small number here is normal.

Threat Traffic & Category Breakdown

Threat Traffic — 30-day totals

Total messages by outcome across the period

The big picture: how many emails were clean vs. spam vs. scams vs. viruses this month.

Spam Breakdown

Top subcategory: Spam

A closer look at what kind of junk mail showed up most.

Fraud Breakdown

Top subcategory: Phishing

Scam emails trying to trick someone into giving up information or money.

Malware Breakdown

Top subcategory: Virus

Emails carrying harmful software or infected file attachments.

Threats by Domain

Spam + fraud + malware combined

Which Harborline email domain is receiving more attack attempts — useful for knowing where to focus awareness training.

Proofpoint Essentials · 30 Day Threat Report for Harborline Foods, LLC