Fraudulent password resets have become an increasingly common method used by cybercriminals to compromise an organization's security, including at higher education institutions. In this type of attack, cybercriminals impersonating community members attempt to reset a community member鈥檚 password by contacting the support phone number or email address. Attackers often possess personal information, such as birth dates and Social Security numbers, which they use to attempt fraudulent password resets.
Important Reminders:
- Social Media Awareness: Avoid posting details on social media that could be used to identify you or answer security questions, such as birth dates, pet names, or hometowns. Cybercriminals often use publicly available information for fraudulent activities.
- Self-Service Reset: If you remember your Challenge Questions and answers, you can reset your password through Agora Portal. We strongly recommend reviewing your Challenge Questions annually.
- Strict Verification: Information Technology Services cannot accommodate requests to bypass the required verification process. This policy is essential to safeguard your personal information, and ensure the integrity of Boston College data and systems.