{"id":2514,"date":"2019-12-20T19:23:50","date_gmt":"2019-12-20T19:23:50","guid":{"rendered":"https:\/\/technology.dearbornschools.org\/?p=2514"},"modified":"2019-12-20T19:24:00","modified_gmt":"2019-12-20T19:24:00","slug":"online-security-part-2","status":"publish","type":"post","link":"https:\/\/iblog.dearbornschools.org\/technology\/2019\/12\/20\/online-security-part-2\/","title":{"rendered":"Online Security &#8211; Part 2"},"content":{"rendered":"\n<p>&#8216;Tis the season. I just received a notification that Pure Michigan&#8217;s account was compromised:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><strong>December 20, 2019<\/strong><\/p><p>As most of you are aware, Wednesday, December 18th an email was sent out\u00a0<strong><em>appearing<\/em><\/strong>\u00a0to be from\u00a0<strong>Pure Michigan \/ Michigan Festivals and Events\u00a0<\/strong>regarding updating your membership information. Unfortunately our account with Constant Contact was compromised. Constant Contact recognized that it was a faux email, and quickly disabled the provided links so others were not at risk. We have taken the necessary measures to secure the account again.<\/p><p>While we are needing your updated information, please contact our office directly for forms.<\/p><p>Please accept our apology in this error.<\/p><p>Wishing everyone Happy Holidays<\/p><cite>Mike Szukhent<br>Michigan Festivals and Events Association<br>President, CEO<\/cite><\/blockquote>\n\n\n\n<p>This follows on the heels of the news that 2019 brought us at least <a href=\"https:\/\/gizmodo.com\/report-ransomware-goons-had-a-great-2019-with-at-leas-1840542724\">948 reported attacks<\/a>. Oh, and <a href=\"https:\/\/techcrunch.com\/2019\/12\/19\/ring-doorbell-passwords-exposed\/\">1,500 Ring passwords<\/a> have been discovered to be available via the dark web (in other words, there are 1,500 known user name and password combinations from Ring available to the bad guys). <\/p>\n\n\n\n<p>This follows the news that MysteryScience had a data breach. A couple of our users reached out to me when they received an email stating that MysterScience had been breached and telling them to reset their password. I reached out to MysteryScience to confirm that there was a breach. I also reminded people to NOT follow the link in the email. Instead, always go to the site by <strong>typing in the URL yourself<\/strong>. This way, if the email is legitimate, you&#8217;ll be prompted to change your password. If the email was a phishing attack, you haven&#8217;t fallen for it. <\/p>\n\n\n\n<p>MysteryScience did finally get back to me.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>So sorry for any confusion! I\u2019m glad you\u2019re careful and double-checking. Yes, there was indeed a data breach. If you\u2019d like more information, you can look at this FAQ directly on our website:\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/mysteryscience.com\/docs\/security-update-dec-2019\" target=\"_blank\">https:\/\/mysteryscience.com\/docs\/security-update-dec-2019<\/a><\/p><p>You can reset your password from the link in the email we sent out to all users affected by this breach. Alternatively, you can go directly to our website at\u00a0<a rel=\"noreferrer noopener\" href=\"http:\/\/www.mysteryscience.com\/\" target=\"_blank\">www.mysteryscience.com<\/a>, and it will prompt you to reset your password there.<\/p><p>I hope this clarifies&#8211;and I\u2019m sure glad you reached out to confirm!<\/p><cite>MysteryScience<\/cite><\/blockquote>\n\n\n\n<p>All of this is a good reminder to never use the same password twice. This can be accomplished via utilizing a <a href=\"https:\/\/technology.dearbornschools.org\/2016\/02\/12\/password-tips\/\">good password manager<\/a> (which I&#8217;ve been advocating for since 2016). <\/p>\n","protected":false},"excerpt":{"rendered":"<p>More breaches have been discovered. MysteryScience follow up. How to stay safe online. [Read time: ~ 1 minute.]<\/p>\n","protected":false},"author":6,"featured_media":2515,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"generate_page_header":"","footnotes":""},"categories":[4],"tags":[],"class_list":["post-2514","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-new-category"],"_links":{"self":[{"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/posts\/2514","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/comments?post=2514"}],"version-history":[{"count":2,"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/posts\/2514\/revisions"}],"predecessor-version":[{"id":2517,"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/posts\/2514\/revisions\/2517"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/media\/2515"}],"wp:attachment":[{"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/media?parent=2514"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/categories?post=2514"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/iblog.dearbornschools.org\/technology\/wp-json\/wp\/v2\/tags?post=2514"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}