Access Keys:
Skip to content (Access Key - 0)

2014-11-05 - MIT Email Address Appears In Purported Data Leak

This notice was sent out to ~100 MIT community members on 2014-11-05 by IS&T's Security Operations Team. Please email security@mit.edu with questions.

Good Morning,

IS&T's Security Operations Team is writing to inform you that your MIT email address has been published online in a purported third-party data leak.

* * WHAT HAS HAPPENED * *

Recently, an unknown party uploaded 14 million username and password combinations to an online forum. The unknown party states that these username and password combinations are working credentials for Apple's iCloud service.

Apple allows users to set non-iCloud email addresses as usernames. Because of this, some MIT community members have used their MIT email address as their iCloud username.

* * WHAT HAS IS&T DONE * *

IS&T's Security Operations Team has downloaded the complete list and discovered close to 100 MIT email addresses in the purported data leak. Out of an abundance of caution, we are notifying you that your MIT email address is on the list.

* * WHAT DO I NEED TO DO * *

If your MIT account password matches the password below, we recommend you change your MIT password immediately.

Username: <EMAIL>
Password: <PASSWORD>

Your MIT password can be changed by visiting the following site: https://ca.mit.edu/ca/cpw

If you use the password listed above at any non-MIT sites (e.g. Facebook, Twitter, online bank, etc.) we recommend changing that password as well.

If you do not recognize the password listed above, no action is necessary.

Again, we are contacting you out of an abundance of caution in the event that the password listed above is currently in use by you. The data was not taken from any MIT systems.

If you have any questions, please reply to this email.

A copy of this email can be found in The Knowledge Base http://kb.mit.edu/confluence/x/logwCQ.

Regards,
Security Operations

Massachusetts Institute of Technology
Information Systems & Technology (IS&T)
Security Operations

security@mit.edu http://ist.mit.edu/secure

As a reminder: IS&T will NEVER, for any reason, request your username or password via email. If you question the validity of an email supposedly from IS&T, please double check with the IS&T Help Desk (http://ist.mit.edu/help) before responding.

IS&T Contributions

Documentation and information provided by IS&T staff members


Last Modified:

November 05, 2014

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
Labels:
c-announce c-announce Delete
security security Delete
icloud icloud Delete
data data Delete
leak leak Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
Feedback
This product/service is:
Easy to use
Average
Difficult to use

This article is:
Helpful
Inaccurate
Obsolete
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki