<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:-webkit-standard;
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hello CITL Members,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">UC Riverside recently experienced, responded to, and recovered from a security incident. In December 2021, an employee in the UC Riverside Registrar’s Office was phished and opened a malicious file attachment. The resulting unauthorized
activity triggered security alerts that were promptly responded to by Information Security staff, resulting in isolation of the impacted computer within a few hours.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">UC Riverside worked with outside experts to investigate this matter and determine what happened, what data was impacted, and to whom the data belongs. The forensic evidence indicated that a limited number of emails from two email accounts
within the Registrar’s Office were subject to unauthorized access. Individual notifications will be sent beginning on March 11, 2022 to those members of the UC Riverside community whose personal information was contained within those impacted emails.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Should you receive any inquiries from the broader UC Riverside community regarding this security incident, you may direct them to the dedicated call center hosted by Experian at 1-(877)-653-0418 or, alternatively, to a dedicated email address
within the UC Riverside Registrar’s Office, <a href="mailto:registrarprivacy@ucr.edu">
registrarprivacy@ucr.edu</a>. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The security incident is an important reminder of the potential harm of phishing, and we encourage everyone in the UC Riverside community to remain vigilant. I want to commend the quick detection and response from UC Riverside ITS.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Sincerely,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><b><span style="font-size:12.0pt;font-family:-webkit-standard;color:#001C31">Dewight Fredrick Kramer</span></b><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:-webkit-standard;color:#1F1F1F">Chief Information Security Officer </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:-webkit-standard;color:#1F1F1F">Information Technology Solutions</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:-webkit-standard;color:#1F1F1F">University of California, Riverside </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:Wingdings;color:#1F1F1F">(</span></b><b><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#1F1F1F"> </span></b><span style="font-family:-webkit-standard;color:#1F1F1F">(951) 827-3070| </span><b><span style="font-size:9.0pt;font-family:Wingdings;color:#1F1F1F">*</span></b><span style="font-family:-webkit-standard;color:#1F1F1F"> </span><span style="font-family:-webkit-standard;color:#01203F"><a href="mailto:dewight.kramer@ucr.edu" target="_blank" title="mailto:dewight.kramer@ucr.edu"><span style="color:#000039">dewight.kramer@ucr.edu</span></a></span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><img border="0" width="300" height="57" style="width:3.125in;height:.5937in" id="Picture_x0020_1" src="cid:image001.png@01D8349D.29326CF0" alt="cidimage001.png@01D7425D.25491FE0"></span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>