Don’t fall for this fake notification claiming to be about your HIPAA compliance.
In reference to the fake OCR communication, OCR has warned, “Though the postage is marked first class, the mailer’s intent is not. In fact, it is another low-class act by scammers.” The postcards contain misleading information, claiming to be notices of required HIPAA compliance risk assessments.
Source: Alert: Fake Postcard Disguised as OCR Communication