CaTS Blog

Welcome to the Spring 2021 edition of the Quarterly Security Reminders email, brought to you by Wright State's Chief Information Security Officer. This quarter's newsletter will provide you with information about the proper ways to handle and store sensitive data.

With so many of us working remotely during the Coronavirus pandemic, handling and storing sensitive data, such as social security numbers, student information covered under FERPA, and credit card data, has been a challenge for many of us.  When we do not have easy access to WSU’s network storage (H, K, and R drives) it is very tempting to store data in a convenient location such as Microsoft’s OneDrive or a SharePoint site.  As a reminder that while OneDrive and SharePoint sites are secure, they have not been cleared for the storage of sensitive data.  The type of data mentioned above should only be stored on WSU’s network storage with the exception of credit card data.  Credit card data should never be stored on WSU storage, whether locally on your computer, thumb drive, or on network storage.

Please see the Risk Matrix below:

If you have any questions on the best way to handle sensitive data, contact the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu with your questions.
Reference material can be found at the following locations:

University Data Classification and Risk Matrix
https://wrightstate.service-now.com/sp?id=kb_article&sys_id=a207b44c134e57007e89fabed144b0db

HIPAA Regulations: Uses and Disclosures of Protected Health Information
https://www.wright.edu/sites/www.wright.edu/files/page/attachments/hipaa-regulations.pdf

Student Privacy and Release of Educational Records – FERPA
https://policy.wright.edu/policy/3010-student-privacy-and-release-educational-records-ferpa

The Help Desk was recently notified of an email phishing scam that targets Wright State members. The email appears to come from the address ‘information@wright.edu' with a subject line similar to 'WRIGHT.EDU: Notice of inactive account'.

Please be aware that this is a scam. As always, do NOT click on any links or download any documents that may be contained in this email, and do not respond to this email with any personal information. If you have already clicked on a link and entered any personal information or your Wright State credentials, please reset your Campus 'w' account password immediately.

If you have any questions, or for assistance resetting your password, contact the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu.

At this time, Wright State members may experience issues when attempting to join a Webex meeting or class using the Webex external learning tool in Pilot. Users attempting to access a meeting link through Pilot are receiving a 502 Bad Gateway error message, and are unable to join the session (pictured below).

Those attempting to join Webex sessions outside of Pilot should be able to continue using the service as normal.

CaTS and The CTL are working with Cisco on a resolution to this issue, and will notify campus once this has been resolved.

If you have any questions, please contact the CaTS Help Desk at 937-775-4827, or email helpdesk@wright.edu.

CaTS has noticed a recent increase in the number of phishing attempts, specifically fake job offer scams and gift card exchanges, targeting Wright State faculty, staff, and students. Below is information to help keep your Wright State accounts secure:

What are Phishing Scams?

• Phishing scams are emails designed to trick you into sending an unknown third party your account information or other personal or financial information.
• These emails may look like they're coming from Wright State, CaTS, your bank or credit card issuer, or any other institution you do business with.
• The links in phishing emails often take you to a web page that appears to be a WSU site, such as wings.wright.edu. You can avoid being tricked by these fake pages by typing in the URL, such as wings.wright.edu rather than trusting the link.
• Many email scams often contain fake job offers; if an email contains poor grammar or wording, or seems too good to be true, it most likely is.

How Can You Avoid Phishing Scams?

• Remember that CaTS, WSU, and other reputable businesses WILL NEVER ask you for any personal information, such as your username and password, via email.
• Never respond to a suspicious email or click links in those emails.
• Don't give out your personal information to anyone via email.
• Don't download attachments from an email unless you trust the sender.

Questions?
If you receive an email and are unsure if the message is a scam, contact the CaTS Help Desk at 937-775-4827. We can help determine whether the email you received is real or not.