Ateneo
Didattica
Ricerca
InternazionaleGiovedì, 11 Luglio, 2024 - 12:15
Hacker Attack: Further Suggestions and Precautionary Measures
Following the notification to the affected parties published on the website on June 14 and sent through the University's mailing lists on the same date, various requests for clarification have been received by the Incident Response Team and the Data Protection Officer.
Therefore, it is deemed useful to provide some information regarding the precautions and behaviors that affected parties can adopt for their protection following the attack by cybercriminals.
Regarding phishing, it should be noted that this is an illegal technique used to obtain confidential information related to a person or a company—such as usernames and passwords, access codes, bank account numbers, and debit and credit card data—with the intent of committing fraudulent operations (this definition is provided by the information sheet from the Data Protection Authority available at: [Phishing: Attention to Data Fishermen]
The frequency of phishing attempts has increased in recent years, regardless of the cyberattack suffered by the University; phishing attempts, even those possibly received during this period, are not necessarily linked to this attack.
In any case, it is advisable to take the precautions described by the Data Protection Authority at the link: [Phishing Precautions](https://www.garanteprivacy.it/temi/cybersecurity/phishing).
Furthermore, regarding the exfiltration of IBANs, as confirmed by the University's Treasury Institute during the Incident Response Team meeting, the mere availability of an IBAN number by unauthorized persons does not in itself allow any unauthorized withdrawal of money from the affected bank account.
As previously stated, the University immediately filed a comprehensive criminal complaint about the incident. However, those who have received a personal notification of a specific violation related to the exfiltration of personal data contained in the images of ID documents, and who wish to file an independent personal criminal complaint, can also contact the University’s Legal Office.