Update:

Given recent IT security threats generally, DoIT has decided to force the password change to May 23, 2014, the day after Undergraduate Commencement. Thank you in advance for your patience and understanding. 

--------------------------------------------

In an effort to improve campus security and better protect user information, DoIT is requiring that everyone with a UMBC account must change his or her password by June 9, 2014, unless this has already been done this calendar year. This will apply to all myUMBC account holders -- students, faculty, staff and alumni. We know people hate changing their account passwords, but with the rise of emails targeting people to share their account and password, called phishing, we feel it is necessary for security.

As part of this effort, everyone will also be required to provide an alternate email address and create account security questions. Once in place, all users will then be able to reset their password through a self-service page. We have had these account security questions in place for the last two years for students and the program has been very successful in reducing the number of time-consuming, manual password resets performed by our Technolgy Support Center (TSC). We expect that by expanding self-service password resets to all account holders, everyone will benefit.

A notice will appear to all faculty and staff when they login on Wednesday, April 23, informing them they need to change their password and establish their security questions, if they have not done so already in 2014. While the final date for password changes is June 9th, DoIT especially recommends that faculty make this change before they leave for the summer. We will also be sending out regular reminders.

To create your own security questions, visit the following Frequently Asked Question (FAQ):

How do I create my security questions to reset a forgotten password?

If you have any questions or need help, please submit an RT Ticket or contact the TSC at 410.455.3838.

A new phishing scam is threatening to deactivate email accounts. This email is not from UMBC. Do not click this link.

Here's what's being received:

"This E-mail is sent by the HelpDesk Expert for IT Support system for Mailbox notification and update purposes. We are conducting an email sweep upgrade due to our new login home page that is coming up soon for your better and faster server. So we are removing all unused email and registration of all active Student/Staff mail account to enable the University create new logins for our 2013/2014 students and staff. So all users are to verify there accounts.

CLICK HERE: To go to verification page and follow the instructions on the popup page

IMPORTANT NOTICE: ACCOUNT OWNER THAT REFUSES TO VERIFY/UPGRADE HIS/HER ACCOUNT WILL LEADS TO YOUR ACCOUNT DE-ACTIVATION WITHIN 48 HOURS PRIOR TO THE URGENT THAT CONTAINED IN THIS SHEET.

Copyright@2013 Help-desk Technical Support Centre."

Again: Do Not Click The Link. If you already did, please change your password immediately.

A new phishing scam is attempting to fool people into providing personal information by claiming that there is a Blackboard notification waiting for them, and provides a link for logging into Blackboard. Do not click this link.

Blackboard email notifications do not require you to sign in to Blackboard to read them, the information is provided in the email itself.  Always visit http://my.umbc.edu directly to log into Blackboard or by typing it in the address bar, or using your own bookmarks/favorites.

Here is an example of the phishing email to watch out for:

Good Morning,

Your school has posted an important information regarding a course for you.

You are required to immediately sign in to Blackboard Learn.

Click here to sign in to Blackboard Learn

Thank you.

Blackboard Learn Notifications.

Here is another example:

Good Morning,

An important course form has been posted to you on the Blackboard Learn System.

Click here to confirm the form

Thank you.

Blackboard Learn Notifications.