#  2026 Cyber Security Awareness Month Phishing Derby 

 



       ![surprised goldfish looking at a baited hook](/sites/g/files/omnuum12036/files/styles/hwp_21_9__1920x825/public/2026-07/phish%20derby%202.jpeg?itok=ESBorL5L) 

 

 



 

 



 

##  Join the October Phishing Derby! 

Opt in below to take part in our Phishing Derby, where you'll receive four simulated phishing emails throughout October. Sponsored by Information Security and Data Privacy in celebration of Cybersecurity Awareness Month, this challenge is a fun way to sharpen your phishing detection skills!

**THE RULES:** 1. You must sign up to participate 2. You must report all four simulations correctly within three days of the email arriving in your inbox. 3. Don't ruin the game for others - when you find one of the simulations - keep it to yourself (and report it). 4. If you click on a link in one of the phishing emails, you can still be entered to win as long as you report it.

**HOW TO REPORT:** All four messages should be reported to <phishing@harvard.edu> by forwarding the email **or** by using the 'Report' button in Outlook. The simulated phish in this contest will be more challenging than what you see in the monthly simulations, but we will never impersonate someone from the university.

**HOW TO WIN:** One winner will be selected from the group of people who report all four emails, however, you will be on the list as someone who successfully completed the derby. The list will be shared on Slack!

[Sign up for the 2026 Phishing Derby](https://harvard.az1.qualtrics.com/jfe/form/SV_dirAIIZ10HxMEOW)

Enrollment ends on September 30



 

##  Did You Catch and Report? 

 



  [### Week One

 ](https://hu.sharepoint.com/:i:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/Derby_Wk1.jpg?csf=1&web=1&e=6zNsUT)Come back to see the results!



 

   ![fish hooks and password written on paper](/sites/g/files/omnuum12036/files/styles/hwp_16_9__480x270/public/2025-09/derbywk1.jpeg?itok=6-3Dth_k) 

 

 

 

  [### Week Two

 ](https://hu.sharepoint.com/:i:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/Derby_Wk2.jpg?csf=1&web=1&e=ZHe9ll)Come back to see the results!



 

   ![fish hook with do not click written on paper](/sites/g/files/omnuum12036/files/styles/hwp_16_9__480x270/public/2025-09/derbywk2.jpeg?itok=tQGfmBjF) 

 

 

 

  [### Week Three

 ](https://hu.sharepoint.com/:i:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/Derby_Wk3.jpg?csf=1&web=1&e=4rhKbP)Come back to see the results!



 

   ![fish hook with username written on paper](/sites/g/files/omnuum12036/files/styles/hwp_16_9__480x270/public/2025-09/derbywk3.jpeg?itok=7AIvapzR) 

 

 

 

  [### Week Four

 ](https://hu.sharepoint.com/:i:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/Derby_Wk4.jpg?csf=1&web=1&e=pJ0Or5)Come back to see the results!



 

   ![envelope with fish hook displayed on mobile device](/sites/g/files/omnuum12036/files/styles/hwp_16_9__480x270/public/2025-09/derbywk4.jpeg?itok=iWCRawmB) 

 

 

 

  

 

 

 

##  Additional Resources 

[Cybersecurity Awareness Month page](https://privsec.harvard.edu/cyber-security-awareness-month)

[PrivSec Awareness &amp; Education page](https://privsec.harvard.edu/awareness-and-education)

[Phishing Awareness Program](https://privsec.harvard.edu/phishing-awareness)

[Best Practices Resource Hub](https://privsec.harvard.edu/best-practices)