You can check whether your Radboud email address is included on the police check je hack website.
The RU-SOC strongly suspects that this concerns data from employees who have installed the Odido app and created an account to view their data usage. There are currently no indications that Radboud accounts have been attacked or taken over.
What are the implications?
Criminals can use data for targeted phishing attacks, telephone fraud or other types of scams. Because data has been made public, the amount of phishing and fraudulent phone calls may increase. So:
- be extra alert to messages relating to invoices, bank details, ID verification or data breach compensation.
- do not click on links or open attachments in suspicious emails.
Report suspicious messages via the phishing report button or to the IT Helpdesk.
The IT Helpdesk can be reached by telephone on +31 24 36 22222 (Monday to Friday from 9 a.m. to 5 p.m.) or by email at icthelpdesk [at] ru.nl (icthelpdesk[at]ru[dot]nl).
What actions do we ask you to take?
Keep work and private matters separate.
- Only use your Radboud password for your Radboud account.
- Only use your Radboud email address for work-related matters.
- Check whether you use “external services” for which you use your Radboud email address. Change this to a private email address.
- Check whether you use your Radboud password for “external services” and change it immediately.
- Where possible, use Multi-Factor Authentication (MFA).
- Do not share your passwords, PIN codes, MFA codes or other personal information with anyone.
If you have any questions, please feel free to contact the ICT Helpdesk.
