My account has been compromised - What do I do?
Try to fing out how this could happen
Some possibilities are:
- compromised IT (your own or IT operated by a third party but used by you)
- Unsafe IT Environments like foreign WiFis
- If you suspect your own IT check it thoroughly and/or completely reinstall it
Check all your data for infection
- Viruses and the like can hide in office documents, PDFs etc
- Check your data on a known safe system with a uptodate virus scanner
- You can use a tool like Desinfec’t to check your data
- Keep in mind that external drives (e.g. USB Flash Drives) can be infected too
Assume the worst case scenario: All your accounts on all services are compromised
- Change your login data (passwords) on all services (LMU and others) to be on the safe side
- Use known safe IT for that (your reinstalled own PC or a safe foreign PC)
- You most likely wont have to do something If a service is using 2FA or some comparable tool
- Keep a close eye on the activities on sensitive services (Online Banking, Shopping, etc.)
IFI CIP
- Keep in mind that some services have their own distinct password management. E.g. the password for gitlab2.cip.ifi.lmu.de is not synced with the cip-account password and needs to be changed seperately
- If your account was locked by the RBG you will most likely have to come to the RBG speaking hour to get your account unlocked again.
- Bring your ID documents (Student ID, Passport etc.)
- We will talk about the first point (How this could happen) with you
Reporting of a DataProtection incident
- This only applies if you are using affected services for work and personal data might be affected.