In 2020, the 3D model sharing service Thingiverse suffered a data breach. On October 13, 2021, the data compromised in the breach was posted in various hacker forums. This breach contained data for approximately 228 thousand customers. The information included usernames, email addresses, names, passwords, IP addresses, and geographical addresses.

The compromised data was shared in an online hacking forum. Four UMBC accounts were victims of this breach. The victims are being notified via their UMBC emails and/or their alternate emails. If you have a Thingiverse account, please contact them to see if you have been affected by this breach.

To see if you were involved in any other breach, visit: https://haveibeenpwned.com/.

More about Thingiverse data breach:

https://www.databreachtoday.com/thingiverse-data-leak-affects-25-million-subscribers-a-17729

If you have any questions or concerns, email us at: security@umbc.edu.

Information about this breach was provided to us by Have I Been Pwned(HIBP). 

______________________________________________________________________________________________________________________________________

Receive any suspicious emails?

Forward it to security@umbc.edu along with the email headers. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

Follow us on myUMBC:https://my3.my.umbc.edu/groups/itsecurity.

The UMBC Department of Information Technology (DoIT) received a report of spam invoking former President Trump, collectible coins, and the security-focused Telegram messaging system.  See  the example below:

Excerpt:

Account data breach: LinkedIn 

In April 2021, an employment-oriented online service, LinkedIn, was targeted by attackers who scraped data from hundreds of millions of public profiles and later sold them online. Whilst the scraping did not constitute a data breach, nor did it access any personal data not intended to be publicly accessible, the data was still monetized and later broadly circulated in hacking circles. The information included education levels, email addresses, genders, geographic locations, job titles, names, social media profiles. No financial information was leaked.

2029 UMBC accounts were victims of this scrape. The victims are being notified via their UMBC emails and/or their alternate emails. If you have a LinkedIn account, we suggest changing your password there and anywhere else that you used the same password.

To see if you were involved in any other breach, visit: https://haveibeenpwned.com/.

More about LinkedIn  data breach:

https://www.businessinsider.com.au/linkedin-data-scraped-500-million-users-for-sale-online-2021-4

https://news.linkedin.com/2021/june/an-update-from-linkedin

If you have any questions or concerns, email us at: security@umbc.edu.

Information about this scraped was provided to us by Have I Been Pwned(HIBP). 

______________________________________________________________________________________________________________________________________

Receive any suspicious emails?

Forward it to security@umbc.edu along with the email headers. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

Follow us on myUMBC:https://my3.my.umbc.edu/groups/itsecurity.

The Division of Information Technology( DoIT) recently received reports about a phishing email impersonating Dr. Hrabowski. Below is an example of such an email. We removed the recipient’s information for privacy reasons.

This email originated from <msgrenaway7511@gmail.com>, which is not Dr. Hrabrowski’s email nor a UMBC email. So even though we would all love to have a chat with Dr. Hrabrowski, this is too good to be true.

If you have received any message similar to the one listed above, DO NOT RESPOND. Instead, please forward it with its headers tosecurity@umbc.edu. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

______________________________________________________________________________________________________________________________________

Receive any suspicious emails?

Forward it to security@umbc.edu along with the email headers. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

Follow us on myUMBC:https://my3.my.umbc.edu/groups/itsecurity.

The Division of Information Technology (DoIT) recently received reports of a new form of phishing campaign. This campaign informs recipients that they have “# new pending incoming emails” where # represents some actual number.  Below are examples of the different kinds of emails that we received. We removed the recipients’ information for privacy purposes.

This example originated from <noreply-mailbox@umbc.edu>, which looks like a UMBC account; however, this account was spoofed. An outside person created this @umbc.edu email for phishing purposes. 

Below is another similar email that is spoofed. It originated from <cpanel@umbc.edu>, which is also not a UMBC account.

The links in both of these emails will take you to separate domains https://sign-in-verification-929bb.web.app and https://firebasestorage.googleapis.com respectively. The links in these emails will ask you to sign in. By signing in, they will be able to steal your passwords. 

Below is a copy of the https://sign-in-verification-929bb.web.appwebsite. The Firebase page has been removed.

If you have received this email, please DO NOT CLICK on the link. However, if you have clicked on the link, DO NOT ENTER your password. If you entered your UMBC password, immediatelyCHANGE YOUR PASSWORD.

If you have received any message similar to the one listed above, please forward it with its headers tosecurity@umbc.edu. 

______________________________________________________________________________________________________________________________________

Receive any suspicious emails?

Forward it to security@umbc.edu along with the email headers. For instructions, visit: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

Follow us on myUMBC:https://my3.my.umbc.edu/groups/itsecurity.