Cybersecurity

If something feels suspicious, report it. It's better for the University's cybersecurity staff to investigate a false alarm than miss a real attack. 

⚠️ If you think your Columbia account or computer has been compromised: 

  • Disconnect your device from the internet (including Wi-Fi, wired networks, and roaming data).
  • Do not interact with suspicious messages or ransom demands.
  • Contact CUIT or CUIMC Information Technology immediately.
  • Leave the device powered on unless instructed otherwise.Change your UNI password from a different trusted device.

🪧 Signs Your Account or Device May Be Compromised

  • You approved an Multi-Factor Authentication request you did not initiate.
  • Your account sent emails you did not write.
  • Files suddenly become inaccessible or renamed.
  • Your computer displays a ransom message.
  • You clicked a suspicious link and entered your UNI credentials.
  • Colleagues report receiving unusual messages from you.

🚫 Ransomware Attack

  • Report the incident immediately to Public Safety
  • Do not pay ransom
  • Do not communicate with attackers

Cybersecurity Tips

Be aware of common scams targeting university students, faculty, and staff:

  • Financial aid scams
  • Payroll diversion scams
  • Gift card fraud
  • Research data theft
  • Fake Microsoft 365 or Google Workspace login pages
  • Scholarship, part-time job, and internship scams
  • Do not click unknown links or attachments.
  • Verify unexpected requests for money or credentials.
  • Look for unusual sender addresses.
  • Report suspicious emails or texts to CUIT.
  • Use strong, unique passwords.
  • Enable multi-factor authentication (MFA).
  • Never approve MFA requests you did not initiate.
  • Never share your login credentials.
  • Log out of shared devices.
  • Keep software and apps updated.
  • Only install apps from trusted app stores.
  • Use secure Wi-Fi connections.
  • Lock your device when unattended.
  • Change your UNI password.
  • Revoke active sessions if available.
  • Monitor your accounts for unusual activity.
  • If lost, report the loss immediately to CUIT or CUIMC IT.
  • If stolen, report the theft to Public Safety.