Re: Mathway data breach

["Rose, Henry" <harose () PVAMU EDU>]

Ren ISAC does send alerts with accounts implemented in a compromise, we also get a feed from knowbe4.

Best Regards,

Henry Rose
Security Analyst II
Office of Information Resource Management
P. O. Box 519, Mail Stop 1460 Prairie View, TX, 77446
Harrington Science, Rm 311E
Tel: (936) 261-9353| Fax: (936) 261-9342
Email: harose () pvamu edu<mailto:harose () pvamu edu>
How was my service<http://www.pvamu.edu/irm/customer-service-survey/>


[cid:image001.jpg@01D04B80.E1EB84B0]<http://www.pvamu.edu/>
Follow PVAMU! [cid:image002.png@01D04B80.E1EB84B0] <http://www.facebook.com/pvamu> [cid:image003.png@01D04B80.E1EB84B0] 
<http://twitter.com/pvamu> [cid:image004.png@01D04B80.E1EB84B0] <http://www.flickr.com/photos/pvamu/sets/> 
[cid:image005.png@01D04B80.E1EB84B0] <http://www.youtube.com/pvamu>


From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Theresa Semmens
Sent: Tuesday, June 23, 2020 11:53 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Mathway data breach

Reach out to REN-ISAC, they may have the information you need.

Theresa

Theresa Semmens
Chief Information Security Officer
Nevada System of Higher Education
4505 S Maryland Parkway (MS 4016)
Las Vegas, NV 89154-4016
tsemmens () nshe nevada edu<mailto:tsemmens () nshe nevada edu>
702-720-3318

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Josh Grier
Sent: Tuesday, June 23, 2020 9:52 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Mathway data breach


⚠ External Email:
Hi,
I think I’m starting to see some credential testing against our student accounts that were a part of the Mathway data 
breach earlier this year and I was wondering if anyone has found a searchable dataset for what was released.  I know 
how many of our accounts were included in the dump but I haven’t found the data to identify them by name so I can 
proactively have them change their password and I’d love to be able to do that. Thanks.

Josh Grier
Information Technology Services
Western Colorado University
970.943.3107
www.western.edu<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam01.safelinks.protection.outlook.com_-3Furl-3Dhttp-253A-252F-252Fwww.western.edu-252F-26data-3D02-257C01-257Ctsemmens-2540NSHE.NEVADA.EDU-257C0a750c343b614fd6a3da08d81795b716-257C8ff9d11a9e074150ac216eedccccc3d3-257C0-257C0-257C637285279081758615-26sdata-3DhqZsU19LOlWN-252Bvfd6nTc9S8hYhB5-252BOUmlNFFGGSWXL0-253D-26reserved-3D0&d=DwMGaQ&c=aKVGQ2uftgEtyjWUfhfCVjzs5Cm37_HE6-sIB-MDAow&r=FieNZpaN22lxzhpzKAafkQ&m=lQ5rsBpjox5gcYTA76vHm0QR5Th9OKywrkcj7QeQHno&s=PxqpEsZMeelnsDQCm_4xmzWHCxRVNODa0L74aCaZQMQ&e=>
jgrier () western edu<mailto:jgrier () western edu>
[image002]


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam01.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fwww.educause.edu-252Fcommunity-26data-3D02-257C01-257Ctsemmens-2540NSHE.NEVADA.EDU-257C0a750c343b614fd6a3da08d81795b716-257C8ff9d11a9e074150ac216eedccccc3d3-257C0-257C0-257C637285279081768611-26sdata-3DpdsGpvlfa-252Bna0mjJCoN-252BTdgQ-252BBUq6ZmQSObtSIk2Uw8-253D-26reserved-3D0&d=DwMGaQ&c=aKVGQ2uftgEtyjWUfhfCVjzs5Cm37_HE6-sIB-MDAow&r=FieNZpaN22lxzhpzKAafkQ&m=lQ5rsBpjox5gcYTA76vHm0QR5Th9OKywrkcj7QeQHno&s=bM09ExRhOw9faFJw0h4aW6XVqRIHOxeLh4UtpTMRhwA&e=>
PUBLIC RECORDS NOTICE: In accordance with NRS Chapter 239, this email and responses, unless otherwise made confidential 
by law, may be subject to the Nevada Public Records laws and may be disclosed to the public upon request.

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.educause.edu_community&d=DwMGaQ&c=aKVGQ2uftgEtyjWUfhfCVjzs5Cm37_HE6-sIB-MDAow&r=FieNZpaN22lxzhpzKAafkQ&m=lQ5rsBpjox5gcYTA76vHm0QR5Th9OKywrkcj7QeQHno&s=tf0AaCTFd4nXWmEW4lddz7YqEHRU0-ZHOCv4qL8UV94&e=>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community