Methods and systems for preventing malicious use of phishing simulation records

A network device, comprising:

• a processor;
• a storage device connected to the processor;
• and
• a set of instructions on the storage device that, when executed by the processor, cause the processor to:
• for an individual, associate a phishing simulation record of the individual with an e-mail alias of the individual and associate the e-mail alias of the individual with a primary e-mail address of the individual;
• sending one or more simulated phishing messages to the individual via the e-mail alias associated with the individual;
• generating a phishing simulation record based on a response by the individual to the one or more simulated phishing messages,
• wherein, for the individual, the phishing simulation record of the individual is associated with the primary e-mail address of the individual only through the e-mail alias of the individual;
• wherein, after sending the one or more messages, disassociating by a computer processor the primary e-mail address of the individual from the e-mail alias of the individual such that phishing susceptibility attribution is precluded for the individual.

A non-transitory machine-readable storage medium comprising software instructions that, when executed by a processor, cause the processor to:

• for an individual, associate a phishing simulation record of the individual with an e-mail alias of the individual and associate the e-mail alias of the individual with a primary e-mail address of the individual;
• sending one or more simulated phishing messages to the individual via the e-mail alias associated with the individual;
• generating a phishing simulation record based on a response by the individual to the one or more simulated phishing messages,
• wherein, for the individual, the phishing simulation record of the individual is associated with the primary e-mail address of the individual only through the e-mail alias of the individual;
• wherein, after sending the one or more messages, disassociating by a computer processor the primary e-mail address of the individual from the e-mail alias of the individual such that phishing susceptibility attribution is precluded for the individual.