Reporting
The ISO can block phishing e-mail messages to prevent others from receiving or responding to the same message. Phishing messages can be reported to the ISO via e-mail at iso-ir@andrew.cmu.edu or by phone at 412-268-2044. When e-mailing, please include the full email headers of the message.
ISO will walk you through evaluating the possible repercussions of responding, and will advise you of any other steps you should take in addition to the ones listed here.
Be prepared to answer the following questions, but don’t delay contacting ISO if you are unsure of the answers:
- Did you click on the link in the email message?
- Did you provide your Andrew userID and password to a link in the email message?
- Do you work with PII or University Restricted data? (see http://www.cmu.edu/iso/governance/guidelines/data-classification.html)
- Do you have PII or University Restricted data in e-mail?