ITS was recently notified by that several thousand luc.edu accounts were listed as part of the 1.4 billion aggregate database of usernames and clear text passwords that was found in an underground community forum.<\/p>\n
What is it?<\/strong> What Does This Mean for You?<\/strong> What am I being asked to do?<\/strong> How Do I Help Prevent This?<\/strong> <\/p>\n","protected":false},"excerpt":{"rendered":" ITS was recently notified by that several thousand luc.edu accounts were listed as part of the 1.4 billion aggregate database of usernames and clear text passwords that was found in an underground community forum. What is it? As hackers accumulate login and password information from phishing scams and other means, they generally either sell this […]<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,3,7],"tags":[],"class_list":["post-843","post","type-post","status-publish","format-standard","hentry","category-front-page","category-hacks","category-published"],"_links":{"self":[{"href":"https:\/\/blogs.luc.edu\/uiso\/wp-json\/wp\/v2\/posts\/843","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.luc.edu\/uiso\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.luc.edu\/uiso\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.luc.edu\/uiso\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.luc.edu\/uiso\/wp-json\/wp\/v2\/comments?post=843"}],"version-history":[{"count":0,"href":"https:\/\/blogs.luc.edu\/uiso\/wp-json\/wp\/v2\/posts\/843\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.luc.edu\/uiso\/wp-json\/wp\/v2\/media?parent=843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.luc.edu\/uiso\/wp-json\/wp\/v2\/categories?post=843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.luc.edu\/uiso\/wp-json\/wp\/v2\/tags?post=843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n<\/strong>As hackers accumulate login and password information from phishing scams and other means, they generally either sell this information on the dark web or post it to allow other hackers to use it in more hacking attempts.\u00a0 ITS monitors these sites and notifies anyone whose account might be listed.<\/p>\n
\n<\/strong>Affected users received an email from the DataSecurity mailbox. For individuals that received the email, your luc.edu email account along with a password was listed in this large database.\u00a0 Although we believe that these passwords are expired it is possible that you may have used this password on other non-Loyola sites.\u00a0 As a precaution, ITS recommends that you change your Loyola password using password self-service and change your password as soon as possible. We would also recommend that you check for any non-Loyola sites where you may have used your LUC email address as a logon ID and change your password there as well.<\/p>\n
\n<\/strong>Most of this information is acquired through phishing attacks. Attacks of this type will only continue if the attacker is getting useful information.\u00a0 No one at Loyola University Chicago will ever ask you for your password.\u00a0 It is not the practice at Loyola to provide links requesting credentials to re-enable or verify account information because of an issue with your email.\u00a0 If you see one of these emails, simply delete it. If you have followed through and provided your information go to the password self-service under links on the LUC home page and change your password.\u00a0 If you use your LUC email address at other non-LUC sites, it is recommended that you change your password there as well.<\/p>\n
\n<\/strong>Change your password regularly, especially on public sites that do not have a password expiration policy. Do not click on suspicious links in emails.\u00a0 Attackers prey upon one\u2019s sense of urgency and panic to get users to click on links without checking where that link goes. Do not open email attachments unless you are expecting them and trust the person who sent them.<\/p>\n