Things to Consider if Your UNH Account has been Compromised

If you believe your UNH Account has been compromised, call the UNH IT Service Desk at 603-862-4242 immediately for assistance in securing and recovering your account.  This is an important step as it is not always enough to simply change your password.

Once your account has been secured and recovered, take the following actions immediately:

  1.  Run a malware scan on any device where you have entered your UNH username and password, even if you only logged into a web application like Outlook Web Access (OWA).
    • You can skip this step if you only use your UNH credentials on your UNH computer and it was already scanned by a UNH support tech.
    • If your UNH device has already been scanned, you still need to scan any other device where you have recently entered your UNH username and password.
  2. If you use your UNH username and password to access any applications at UNH that are not linked to your UNH account (you would have to change the password on these accounts separately when you change your password every 6 months), change those passwords as well.  
    • It is recommended that you do not use the same password for multiple accounts.
  3. If you use your UNH username and password for any non-UNH accounts (Netflix, personal email, etc.) you need to change the passwords on those accounts immediately.
    • It is against University best practice to use your UNH username or email address as the username for non-UNH system access.
    • If you are currently using your UNH username and password on any personal accounts, you should change to a new username and always use a different password.
  4. If you use the same or a similar password for ANY other account (even if you aren’t using the same username) – at the University or for personal use – you need to change the passwords on those accounts immediately.
    • You can better protect your information and the University by using a different password for each account you log into, which is easier if you use a Password Manager.
  5.  If you had to change the password for any personal account in step 2 or 3 that is linked/associated with a bank account, credit card account, or any other account that can be used for financial transactions (like Amazon), check the activity on those accounts to ensure there haven’t been any unauthorized purchases or changes.
    • If you notice any unauthorized activity, notify the financial services provider/company immediately.
  6. Check your UNH email account to ensure there haven’t been any inbox rules set up to re-direct or delete mail.
  7. If you had to change the password for any personal email accounts, check those email accounts for inbox rules you did not create as well.
  8. Check the inbox and trash folders in each email account to see if there are any emails indicating your password changed on other accounts that you did not initiate.
    • Contact the provider of that account for any accounts where your password was changed by the attacker.
  9. Review Good Security Practices to Adopt at Work/School, and at Home.
Custom Fields
  • Author: UNH Information Security Services
  • Department: Information Security Services
Attached Files
There are no attachments for this article.
Related Articles RSS Feed
Should you send or receive UNH personally identifiable information by email?
Viewed 435 times since Thu, Jun 9, 2016
Vendor Contracts: Privacy Considerations, Security Review, and NDA
Viewed 1445 times since Mon, May 4, 2015
How to Spot a “Phishing” Email
Viewed 699 times since Tue, Feb 2, 2016
Microsoft Security Essentials and Windows Defender Installation
Viewed 5577 times since Wed, Aug 12, 2015
Tips for Keeping Your Devices Secure
Viewed 50 times since Fri, Aug 4, 2017
SEED: Safe Electronic Equipment Disposal Instructions
Viewed 1391 times since Mon, Apr 27, 2015
Antivirus Software for Windows
Viewed 4453 times since Wed, Aug 12, 2015
UNH Server Best Practices
Viewed 816 times since Fri, Jun 12, 2015
The Fake Speeding Ticket Scam - What Will Hackers Think of Next?
Viewed 531 times since Mon, Apr 4, 2016
Signs Your Account is Compromised
Viewed 44 times since Wed, Aug 16, 2017
MENU