Luther College officials have announced that the school was the target of a phishing email campaign on October 12th. Luther vice president for finance and administration Eric Runestad says a few Luther College employees clicked on the phishing emails and entered their credentials.
The dictionary describes "phishing" as an attempt "to obtain financial or other confidential information from Internet users, typically by sending an email that looks as if it is from a legitimate organization, usually a financial institution, but contains a link to a fake website that replicates the real one."
Runestad says Luther immediately took steps to secure these employees' computers and email accounts. The school also worked with outside computer forensic investigators to launch an in-depth investigation to determine whether any sensitive information was accessed or acquired. That investigation concluded on November 1st that an unknown individual or individuals had gained access to the workstation computer files and email accounts of Luther College employees.
Notification letters have been sent out to every Luther employee who may have been affected. Provisions that have been put in place to monitor and protect personal information of those potentially affected.
A statement from Runesatd says, "Luther College takes the security and privacy in our care very seriously and is responding aggressively to this potential threat to support those who may be affected."