This notice is to highlight a recent computer security issue detected and actioned by the University’s Information Systems and Technology (IST) information security team.
A recent cybersecurity review revealed that the University of Waterloo Library’s Course Reserves System had been recording, to a log file, the WatIAM userid and password of those who had accessed the system. This includes over 1,000 individuals who used the tool in November of 2016, where their user name and passwords were made available on a public web server. Those individuals have been contacted and given information security advice and direction.
This issue was corrected by the Library immediately following notification by IST.
To be prudent, we are recommending that anyone who used the Library’s Course Reserves System prior to August 13, 2018 change their password as soon as possible. IST and the Library are committed to information security and continue to work together to safeguard personal information.
Please direct any questions to the IST Service Desk, at firstname.lastname@example.org or ext. 44357.