 |
 |
MSU Federal Credit Union was recently targeted by a Phishing Scam (~6:00 pm, 03/03/05). Very shortly after the incident, we sent a warning to over 65,000 of our members notifying them of the fraudulent message. (We have learned that some of these warning messages were blocked by spam filters, due to the wording of the message). The following is the official "talking point" list for inquiries about the current Phishing Scam targeting the MSU Federal Credit Union. - MSUFCU's computer system was not breached; our security was not compromised. - MSUFCU accounts are safe and secure. There is no need to take any action unless a member responded to the email and released personal financial information such as account, VISA card numbers, social security numbers, or PIN numbers. - We are uncertain of the source of the email address list. They appear to be mostly .edu addresses. University email addresses are easily available. Think of all the lists you sign and list your email address. It is the way the University communicates. Plus, they are published. - We have notified our members via a blanket email as to MSUFCU being a target of "phishing" scam. It is also on a banner at the top of our homepage. - Again, if the member gave out no information, no action is necessary. What should members do if they revealed information? + Call the credit union. We will remove ComputerLine access, VISA access if the member revealed a credit card number and ATM if PIN was revealed. + Come into the credit union and establish new accounts. + Notify the police department and Federal Trade Commission. + Contact the credit reporting companies and place a "fraud alert" on the report. This will make it more difficult for someone to apply for a loan with the stolen information. + Review credit report regularly. - We have notified the MSU police, the FBI, the Federal Trade Commission, and the NCUA. - Full details about the incident and what members can do if they responded and ways they can prevent identity theft can be found on our website at http://www.msufcu.org/ . - In addition, we have replaced our logo image linked from the Phishing Email so that it now displays a warning message. The image can be seen at https://www.msufcu.org/graphics/drk_msufculogo.gif . I would also like to add that the domain linked from the Phishing Email has been shut down and any attempt to link to the site will be served an 'HTTP Error 403 - Forbidden' message from the hosting site. Kevin Walter Operations Manager - Info Tech MSU Federal Credit Union 517-333-2319 ------------------------------------------------------- This electronic transmission and any information that it contains is the property of MSU Federal Credit Union and is intended for the use of the intended recipient. If you are not the intended recipient, any disclosure, copying or other use of this information is strictly prohibited. If you acquired this transmission in error or feel that any of the information contained within it is offensive or inappropriate, please contact [log in to unmask]