Sent to a ListServ of all UNC students on Monday, the office of Information Management and Technology said that 12-employees had their Ursa accounts compromised.
Using the password reset tool, accompanied with social security numbers IM&T believes were obtained outside the university, one or many nefarious individuals were able to reset employee accounts and download electronic W-2 tax forms.
Since the incident, law enforcement has launched a criminal investigation in the matter. IM&T says that even though no student accounts were compromised, it is always important to use caution when conducting business online, especially during tax season.
In other news, a new IM&T policy requires that all students reset their Ursa password every 365 days. Unless clanged, all passwords are set to expire on February 26 and will cause disruption to services.
