Please be aware of phishing messages that are currently showing up in people’s email inboxes. Recently, phishers have been using information they gather during phishing attacks to log in to Workday and change the direct deposit information of Community members. We are working with the Controller’s Office to implement some safeguards to help mitigate this sort of attack.
To edit payment election details, employees will now be required to enter their current bank account number(s). Employees will be given 3 attempts before the ability to update payment elections will become locked. Help text has been added to the Payment Election screens to remind employees to have their full bank account information readily available, as well as the steps to take when the number of attempts to edit information has been exceeded.
Many of these scam emails use familiar branding – like the Bryn Mawr or Microsoft logos – and recognizable names to create a false sense of security. Phishers will often couple this security with scare tactics in the hope that this will encourage you to act quickly and without thinking about it too much. They’ll say things like a student is in urgent need of assistance, that your account is about to expire unless you act immediately, or that a confidential work report is being shared with you. Often, you will be asked to click on a link and/or fill out a form that asks for private information, including usernames, passwords, or bank details. LITS and Bryn Mawr College will never ask you to fill out a form like that and any email that asks for this type of information is a scam.
Do not respond to the email, click on any links, or fill out any forms, especially with your username and password. Do NOT share your passwords or DUO codes with ANYONE. LITS will never ask you to verify a DUO prompt or send you a passcode or password. Do not approve of any Duo pushes or prompts that you did not initiate yourself.
If you believe you’ve given your password or personal information to a phisher, please change your password immediately and get in touch with the Help Desk.
Email scams come in many forms. While we work to keep you informed, attacks are increasingly diverse and sophisticated. It’s not possible for us to warn you of every message before you see it. Be cautious and suspicious. If you ever have a question or suspicion, don’t hesitate to contact the Help Desk: help@brynmawr.edu or 610-526-7440.