Report a Credential Compromise

Overview

This service enables users to report suspected or confirmed compromises of university credentials, such as usernames, passwords, or multi-factor authentication tokens. Examples include unauthorized access, phishing attacks, or suspicious login activity. Prompt reporting helps safeguard personal and institutional data, reduce risk of further compromise, and maintain compliance with security and privacy standards. 

Features and Benefits

  • Immediate Assessment and Response: Security personnel quickly evaluate the report to determine the nature and severity of the credential compromise. 
  • Account Containment and Recovery: Compromise accounts are locked to prevent unauthorized access, and users are guided through secure recovery procedures. 
  • Threat Analysis and Forensics: Investigators review login patterns, access logs, and related activity to identify the source and impact of the breach. 
  • User Guidance and Education: Affected users receive tailored communication to strengthen account security and avoid future incidents. 
  • Policy and Compliance Alignment: Ensures credential-related incidents are managed in accordance with university policies and applicable regulations. 

Who is this Service Offering Available to?

Available to all faculty, staff, and students who use university-issued credentials to access institutional systems, services, or devices. 

Service Availability

Reports can be submitted 24/7. Most cases are reviewed within two (2) business days, though investigation and resolution timelines may vary based on complexity and urgency. 

Fees or Costs Associated with the Service.

There is no fee for reporting or investigating a credential compromise. If remediation requires additional resources associated costs will be communicated prior to implementation.