Cybersecurity alert: Harvard IT impersonation and fake HarvardKey login page

Dear Members of the Harvard Community,

The University is monitoring an active and specific cybersecurity threat involving individuals impersonating Harvard IT staff to gain access to University accounts and data.

• Be on high alert for unsolicited communications claiming to come from “Harvard IT” asking you to initiate a live voice call and / or directing you to fake Harvard websites not ending in ".edu" (e.g., “harvardkey dot com”).
• Do not log in, install software, or execute commands on your computer or device as part of such a call.

If you believe you have been targeted by this threat, or that your account may have been compromised, report it immediately to the HUIT Service Desk at 617-495-7777. Mere minutes can make the difference in Harvard’s ability to protect you and the University.

Sincerely,

Michael Tran Duff
University Chief Information Security and Data Privacy Officer