On Saturday, April 24 we learned of a situation that compromised the
passwords for the MSU NetIDs of a number of users. This morning, Monday,
April 26, we are mailing the attached memo to all affected users. The memo
urges users to change their passwords immediately. Due to the nature of the
compromise, the window for password changes lasts from 6:00 a.m. until 1:00
p.m. At 1:00 p.m., any affected users who have not changed their passwords
will have their passwords disabled.
Tom Davis, Director of Academic Computing and Network Services, is also
sending an e-mail about this situation to deans, directors, and chairs.
Rich Wiggins
Senior Information Technologist, Academic Computing and Network Services
Michigan State University
517-355-4500 x 149, [log in to unmask]
__________________________________________________________________________
To: <[log in to unmask]>
Sent: Monday, April 26, 2004 6:16 AM
Subject: Your MSU password has been exposed; change it immediately
> Due to a security issue, the password for your MSU NetID ("THOMAS") has
> been exposed. It is possible that your password has fallen into the hand
> of a third party. You should change your MSU NetID password immediately.
> Point your Web browser to:
>
> http://netid.msu.edu
>
> * Click on the 'Change my password' button.
> * Do NOT reset your password to what it currently is; this will NOT
> protect you against identity theft. Change your password to something that
> does not resemble your old one.
> * Do not reveal your password to anyone. No one from MSU will ever
> telephone or e-mail you asking for your password.
>
> If you do not change your password by 1:00 p.m. on April 26, 2004, your
> password will be disabled. If your password is disabled, you will need to
> reset your password; visit http://netid.msu.edu and select "Forgot my
> password."
>
> Your MSU NetID and password are used for many online services, including
> mail.msu.edu, enrollment, changing staff benefits, etc. Therefore it is
> vitally important that you immediately change your password.
>
> A copy of this message will be archived at:
> http://help.msu.edu/communications
>
> If you have any questions, please call the ACNS Consulting Help Desk at
> (517) 432-6200 or visit http://help.msu.edu .
