Customer alert: Identifying malicious emails or websites

A quick reminder to our customers to ensure you remain vigilant against fraudulent emails and websites that are falsely identified as Bombardier. These sites and emails may contain malicious forms or attachments that may prompt you to login or invite you to make a payment to an illegitimate recipient.  

Bombardier is committed to always protecting your security and privacy, and we do not request sensitive information in any of our electronic communications. As such, Bombardier recommends taking the following precautions:   

• Do not open attachments unless they are from a trusted source. Bombardier account statements and invoices are issued in .pdf and .xlsx format. Disregard links that are not .pdf, or attachments that link to a drive, or attachments with unfamiliar file names such as: “Invoice_SOA.html” or “Bank Data Bombardier Aerospace.docx”.   

• Do not trust the sender if the “From” name does not match the email address and does not contain an “@aero.bombardier.com” email extension.

  • Bombardier Accounts Receivable emails originate from account.receivable@aero.bombardier.com, but other communications/invoicing may come from other groups that handle invoicing and payment (i.e. CR&O, Parts Services, etc.)

  • Please ensure that the email you received has not been tampered with or spoofed, even if the “From” name does contain an “@aero.bombardier.com” email extension. When in doubt, please check with your IT department or call our accounts receivables representatives directly to verify.  

• Be suspicious of any email requesting you to change banking details or wire transfer information – contact your Bombardier representative if in doubt.     

• Do not provide any information and do not enter your user ID or password from a link in an email unless you are certain the site is legitimate.   

• Do not click on any links in an email unless they point to a legitimate Bombardier site when hovered over and you are certain the site is legitimate (i.e. ending with “bombardier.com”).   

• Our remittance information is clearly indicated on invoices and monthly statements of account. 

Bombardier strongly recommends you report all suspicious emails to your internal IT or information security group. Should you have any doubts or suspicions concerning any emails from Bombardier, please contact our cyber security team at cybersecurity@bombardier.com.