CTS sent a campus-wide announcement on Tuesday, September 8, regarding suspicious emails that were sent from and to campus email addresses. The emails started over Labor Day weekend and continued into Tuesday. To resolve the issue, CTS has taken multiple steps.

  • Google monitors suspicious activity for our domain and communicates with CTS as they identify compromised accounts. CTS actively monitors that information and suspends compromised accounts. On Tuesday, we suspended approximately 1,150 SUNY Oswego accounts that were compromised.
  • CTS is working with users to restore their service. As of this writing, we have worked with over 250 active account owners to reopen their accounts.
  • We are working with the New York State Cyber Security Operations Center (CSOC) to investigate the incident. The CSOC is researching the contents of the email and the website that the link took people to. If you happened to click the link in the email, you should change your email password immediately, and the password to any other accounts that use the same password.
  • We have been in contact with other colleges and universities that have been affected by the same phishing incident. This particular phishing incident has been reported at some other campuses, including some in the state of New York.
  • You may have noticed that some of the phishing emails were sent to your spam folder while others made it through to your inbox. CTS has hardened the spam filtering so more messages in the future will automatically be filtered. However, we urge you to monitor your spam folder in case some legitimate messages are filtered.

If you would like to check your own account activity, the CTS webpage has three steps that walk you through how to do it. If you see login attempts from states or countries you have not visited, your account is likely compromised. Notify the CTS Help Desk immediately and follow the instructions in the article for resetting your password and signing out of all sessions.

As we learn more, we will keep you posted.  In the meantime, please let us know if you have any questions by contacting the Help Desk at help@oswego.edu or 315.312.3456.