Everyday Gustavus users are exposed to phishing attempts, spam and malicious software.
In recent weeks multiple large data breaches have been reported in the media. The breaches contain personal contact information (name, address, phone, email) for hundreds of @gustavus.edu and @gac.edu accounts. No passwords were included in the breach. This personal contact information makes targeted phishing attempts (spear phishing) more viable.
There are many layers of defense to protect against these attacks. Firewalls, encryption, strong authentication, software updates, anti-virus software, and most importantly end user vigilance and awareness.
Please be vigilant regarding unexpected or unusual email requests, attachments and requests for information. Technology Services will NEVER ask you for your password. Be wary of messages (email and phone) that ask you to follow links, visit sites or send a reply with account credentials or personal information. If you are uncertain of the authenticity of a message, please forward the message to the Technology Helpline (helpline@gustavus.edu).
If an email message has a call to action, browse to the site you normally use for that account and log in – rather than following any links.
Users can check to see if their contact information has been included in any of the recent data breaches by visiting: https://haveibeenpwned.com/
Questions, concerns or issues, please contact the Technology Helpline at 507-933-6111 or helpline@gustavus.edu.
Leave a Reply