Carnegie Mellon University

If you suspect or have been notified that your online account username and password may have been exposed, do the following:

If you can still login to the exposed account, then change to a strong password based on Computing Services password requirements immediately to prevent further unauthorized access.  For Andrew accounts, use Change Your Andrew Account Password.

If you cannot login to the account, then try using the site's password reset procedure if any.  For Andrew accounts, use  What to do if you forget your Andrew account password?

If you still cannot get into the account, contact the site's support desk.  For Andrew accounts, call the Computing Services Help Center at 412-268-HELP (4357).
Contact the site's support desk and tell them what happened.

Ask the support desk to help you audit your account for unauthorized activity.  For Andrew accounts, call the Computing Services Help Center at 412-268-HELP (4357).
Ask your site's support desk to help you undo any unauthorized activity.  For Andrew accounts, call the Computing Services Help Center at 412-268-HELP (4357).

If possible, ask them to monitor your account for further strange activity.

If possible, enable email, phone, or text message activity alerts and check those contact methods regularly.
If your account contains personal information for your family or friends, alert them of the situation and refer them to Dealing with Suspicion or Notice of Data Breach.

If your account contains personal information for anyone except yourself, your family and your friends, notify your site's support desk.  For Andrew accounts, call or email the Information Security Office at 412-268-2044 or iso@andrew.cmu.edu.

If your account contains your financial account numbers, see Exposed Financial Account Number.

If your account contains your Social Security Number, see Exposed Social Security Number.

If your account contains other government issued ID numbers (e.g. driver's license number), see Exposed Government ID Number.
For steps you can take to reduce your risk of Identity Theft, see Protecting Yourself from Identity Theft.