URGENT Cybersecurity Alert: Phishing Attack Targeting Banking Information
Haz clic en este enlace para leer este mensaje en español.
Dear NECSD students, families, faculty, and staff,
We are writing to inform you of a recent email phishing attack targeting members of our school community, advertising a job. An email, appearing to be from a school principal but originating from an external address, was sent with an urgent request for banking information. Please be aware that this was a scam, and no legitimate school official would ever request sensitive financial data via email or text message.
Cyber criminals often use times of distraction as opportunities to attack. We often see an increase in phishing emails and texts during holidays and unexpected events such as the recent snow storm.
Guidance for Affected Individuals
If you or your child clicked on any links in the suspicious email, submitted any banking or personal information, or forwarded the email they received, please take the following steps immediately to protect yourselves from financial risk and identity theft:
-
Stop Interaction: Immediately cease all contact with the scammer and do not provide any more information.
-
Contact Your Bank: Notify your financial institution immediately via their official phone number (found on the back of your card or their official website, not in the suspicious email) and inform them of the situation. They can monitor for suspicious activity, freeze accounts, or issue new cards as needed.
-
Monitor Accounts: Closely review bank and credit card statements for any unauthorized transactions. Scammers often start with small charges to test compromised information.
-
Place a Fraud Alert: Contact one of the three major credit bureaus to place a fraud alert on your credit report to prevent new accounts from being opened in your name:
-
Experian: 1-888-397-3742
-
TransUnion: 1-800-680-7289
-
Equifax: 1-888-766-0008
-
Report the Incident: File a report with the Federal Trade Commission (FTC) at IdentityTheft.gov to receive a personalized recovery plan. You should also consider filing a report with local law enforcement.
-
Update Passwords: Change passwords for any accounts that may have been compromised, using strong, unique passwords and enabling multi-factor authentication (MFA) wherever possible.
General Cybersecurity Best Practices for Everyone
Prevention and awareness are our best defenses against these evolving threats. We encourage all families to stay vigilant and discuss these safety tips:
-
Verify the Sender: Always check the sender's email address, not just the display name. Official school emails always come from our domain (@NESCD.net), not a generic consumer email address.
-
Be Cautious of Urgency: Phishing emails often use alarming language or a sense of urgency to pressure you into acting quickly without thinking.
-
Do Not Click Suspicious Links: Avoid clicking on links or opening attachments in unexpected messages. If you are unsure about a request, go directly to the official school website or contact the principal via a verified phone number you know is real, not the contact information provided in the email.
-
Never Share Sensitive Information: Legitimate organizations, especially schools, will never ask for your passwords, banking details, or Social Security numbers via email or text.
-
Discuss Online Safety: Talk openly with your children about online scams and establish rules for internet use, such as not responding to unknown numbers or clicking on unsolicited links.
-
Enable Multi-Factor Authentication (MFA): Use MFA on all possible accounts for an extra layer of security.
Your vigilance makes a significant difference in keeping our community safe. We appreciate your cooperation and support in ensuring a secure digital environment for everyone.
Sincerely,
Mr. Joseph McGrath
Asst. Superintendent, CIO,DPO
Newburgh Enlarged City School District
For more resources on online safety, please visit the Federal Trade Commission's consumer advice website or IdentityTheft.gov.
ATTENTION: Are your scholars or colleagues doing something great? Please contact the district Communications Team at communications@necsd.net. We’d love to visit your class or event and/or post your pictures and recap to highlight the amazing accomplishments throughout our district!
