From the real Zenith American Solutions 10-10-2025:

Dear Trustees and  Plan Professionals,

We are writing to inform you of a recent security concern involving fraudulent emails impersonating Zenith employees.

A malicious actor has created a deceptive domain—zeniths-american.com—and is using it to send emails that appear to come from Zenith. These emails include authentic-looking Zenith signatures and reference real employees, falsely requesting that clients update our banking information for payments.  Please note that Zenith has no control over this domain.  To be clear, Zenith American Solutions Inc. has not changed banks. Also, please be advised that we would never ask for sensitive information changes such as banking details only via email.

Importantly, this is not a breach of Zenith’s systems. The activity is entirely external and involves impersonation of our company and our employees.  However, Zenith’s Security team is actively reporting the fraud/abuse to the domain registrar and the email vendor. We have also contacted the bank referenced in the fraudulent communication, as they have confirmed they will take appropriate action regarding the account in question. As an added precaution, Zenith will reset any employee account mentioned in the malicious emails.

This incident was immediately brought to our attention by a vigilant client who recognized the suspicious nature of the request. While we are not currently aware of other clients receiving similar emails, we are investigating further and monitoring the situation closely.

🔒 Please be reminded of Zenith’s strict policy regarding banking information:

•        We never request changes to payment details via email alone.

•        Any updates to banking information are confirmed directly through a scheduled conference call with your team.

•        If you receive any communication that seems unusual or asks you to change payment instructions, please contact us immediately before taking any action. If you have already responded to such an email, please reach out to your Zenith contact for further direction.

You should not respond to any emails asking you to change banking information or provide sensitive details. Always double-check the sender’s email address to ensure it is from our legitimate domain (zenith-american.com). Your security and trust are our highest priorities. Again, if you have received any suspicious messages or have concerns, please reach out to your Zenith contact right away.

Note: When reaching out to your Zenith contact, always use contact information that you know to be good.  Do not use any contact information that is found in a suspicious email.

Thank you for your continued partnership and vigilance.

Diana Rudaz | Client Relationship Director

P: (651) 256-1959 | C: (612) 360-3919| Time Zone: CST

Zenith American Solutions | www.zenith-american.com | Follow us on LinkedIn