Re: [EXTERNAL] Re: [SECURITY] Uptick in successful account attacks Fri 3/19/21

["Theodore J. August" <theodore.august () SALVE EDU>]

Thanks Aaron for replying back.

For those here on the list – all the accounts we investigated today did have something in common – they were all 
current or former nursing students.  We are going to follow up with our nursing program here to see what services 
students may be registering with their university credentials to see if we can narrow down a site or service where an 
unannounced breach may have occurred.

Best,

—
Ted August
Assistant Director of Cybersecurity and Compliance
Office of Information Technology
Salve Regina University



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Scantlin, Aaron 
J. <ScantlinA () MISSOURI EDU>
Date: Friday, March 19, 2021 at 11:57 AM
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [EXTERNAL] Re: [SECURITY] Uptick in successful account attacks Fri 3/19/21
We had a rash of compromises overnight as well.

Aaron J. Scantlin
Security Analyst
GCFA, GNFA
University of Missouri System
(573) 884 - 7555
scantlina () umsystem edu<mailto:scantlina () umsystem edu>


From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of "Theodore J. 
August" <theodore.august () SALVE EDU>
Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Friday, March 19, 2021 at 10:20 AM
To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Uptick in successful account attacks Fri 3/19/21

WARNING: This message has originated from an External Source. This may be a phishing expedition that can result in 
unauthorized access to our IT System. Please use proper judgment and caution when opening attachments, clicking links, 
or responding to this email.
Just a quick note to the community to see if anyone else is seeing an uptick in successful account attacks today?  Our 
numbers are anomalously high over the last 12 hours or so.

Best,

—
Ted August
Assistant Director of Cybersecurity and Compliance
Office of Information Technology
Salve Regina University



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Ctheodore.august%40SALVE.EDU%7C9a2ca83dd70f4504eb4e08d8eaefa009%7Cf0e0e20bdffd4b058c6c74ab98a56cd9%7C0%7C1%7C637517662200788011%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=3%2BFEshmF6vBAQC5LCD%2FwvcqI9DA%2FkOyjKx7X4SGgbxQ%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Ctheodore.august%40SALVE.EDU%7C9a2ca83dd70f4504eb4e08d8eaefa009%7Cf0e0e20bdffd4b058c6c74ab98a56cd9%7C0%7C1%7C637517662200797964%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=N9GvumtJyF2w2%2BFvLdyOknX2%2BiWu3IRtYt4l4z%2FikY0%3D&reserved=0>

*** This message was not sent from a Salve Regina University e-mail address. Please exercise caution when responding, 
clicking on links or opening attachments. ***

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community