Notice: COVID-19 resources, information and plans for current and upcoming academic terms. Learn more.

Breached Chegg Credentials

Threat Level: Low
Threat Type: External Account Breach
Advisory Date: 08/19/2019

Description

In April 2018, many University of Regina email addresses appeared in a public password leak from the textbook rental service "Chegg" website www.chegg.com. This means that a previously created Chegg account used a Univeristy of Regina email address. The Chegg website has since been breached, and the account credentials (username/password) used on this site have been released publicly.

Resolution

Although the breached site has said that it will reset all user passwords, you are still at risk if you used the same or similar password for University of Regina accounts, online banking, or other accounts. If you did reuse passwords, it is recommended that you change your passwords as soon as possible.

As with any account credential, several precautions should be taken:
-Choose a totally unique password for each account, website, or service.
-Choose passwords to include a mix of letters, numbers, and symbols.
-Make your password long - the longer the better.
-Set up Two-Factor Authentication for all accounts which support it.

To change your University of Regina password, please visit: https://novapp.cc.uregina.ca/perl/chpass.pl.
For guidelines on creating strong passwords, please visit: http://www.uregina.ca/is/security/resources/resource-password.html .

Resources

For further resoures on this data breach, please visit:

https://sites.northwestern.edu/secureit/2018/09/27/chegg-data-breach/.

https://techcrunch.com/2018/09/26/chegg-resets-40-million-user-passwords-after-data-breach/

To find if your account was among those included in the breach, you can search the addresses included in the breach at: https://haveibeenpwned.com.  If your address is found in the Chegg or any other breach, password changes are recommended.

Please note that the data included in this notification was acquired from an external source. The University of Regina makes no representations, guarantees, or warranties as to the accuracy, completeness, currency, or suitability of the information provided in this notification. The information is provided "as-is” for preventive and corrective purposes.

Please contact the University of Regina IT Support Centre if you have any questions or require assistance:
Webform http://www.uregina.ca/is/forms/ticket.html
Email IT.Support@uregina.ca
Phone 306-585-4685