A former contractor's account was hacked, state officials said, leading to a widespread phishing campaign emanating from official state email addresses.
New York City Mayor Eric Adams' administration has limited access to the employee payroll website after scammers targeted employees' text-message inboxes.
State officials determined that no data was compromised during a phishing attack that hit three state agencies on Wednesday, including the bureau that oversees elections.
A hacker has been building phony versions of websites including those of San Mateo, California; Tampa, Florida; North Las Vegas; and Dallas County, Texas.
Damage was minimal, but the attacks underscore a repeated call from the governor for increased cybersecurity awareness and training throughout the state.