BERKELEY — UC Berkeley students, staff and faculty are being warned of a massive cyberattack that could compromise their data, including bank and Social Security numbers.
UC Berkeley’s Office of Emergency Management sent an alert out this week notifying the campus that the security breach could be serious. The breach affects the entire UC system statewide, not only UC Berkeley.
“The cyberattack that the University of California announced on Friday is a serious one. Your personal information, including Social Security number and bank account information, may be at risk,” said the statement.
The office states that hackers gained access to secure files, and are threatening to publish, or have published, stolen information onto the dark web. The cyberattack was part of a nationwide attack on several hundred institutions, including universities, government agencies and private companies, according to the university.
The attack involves Accellion, a vendor used for file transfer, in which an “unauthorized individual appears to have copied and transferred UC files by exploiting a vulnerability in Accellion’s file-transfer service,” said the UC in an update this week.
Federal law enforcement have been notified and an investigation has begun; UC will also do its own investigation to determine what files may have been copied and transferred in the cyberattack. Those that might have had their data accessed will be notified of the next steps they should take, UC said.
UC warns not to open any suspicious emails, which may be threatening members of the UC community, saying, “Your personal data has been stolen and will be published.” Any suspicious emails should be reported to a local campus security office, or deleted.
Both the University of California and UC Berkeley’s office of emergency management told campus members they could take additional steps to protect their information, including signing up for Experian, a credit monitoring and theft probation service, which includes monitoring the dark web for any postings of an individual’s personal information.
“UC regards the privacy of all its community members with the utmost seriousness. We will update the UC community as we are able to disclose additional information,” the university system said.
