If Your Family Uses University Email, Watch for Suspicious Activity

Cybercriminals have been breaking into email systems at universities across the United States and Canada. They targeted a specific email program called Roundcube that many schools use. The hackers stole login credentials (usernames and passwords) and installed malicious software that lets them spy on email accounts. This affects students, professors, researchers, and staff at universities that use Roundcube email. If you or your child has a university email account ending in .edu, your account could be at risk. The hackers specifically targeted academic researchers, but anyone using these compromised email systems could have had their password stolen.

Your personal emails, research data, and any sensitive information sent through university email may have been accessed.

Here is what you should do right now. First, change your university email password immediately. Make it long and unique, something you do not use anywhere else. Second, enable two-factor authentication on your university account if available. This adds an extra security step when logging in. Third, watch for suspicious emails that ask you to click links or download files, even if they appear to come from colleagues or other students. Fourth, check your email settings for any forwarding rules you did not create, as hackers sometimes set emails to secretly forward to themselves. To stay protected long term, never reuse passwords across different accounts. Use a password manager to keep track of unique passwords for each site. Always turn on two-factor authentication when it is offered, especially for email and school accounts. Be extra cautious about clicking links in emails, even from people you know. Their accounts could be compromised too.