If someone has access to your account, they may not only access your personal information but also Ryerson servers. The following steps could help mitigate impact if your account has been compromised.
It’s important to inform the right people of your account breach, even if it’s not yet confirmed.
Change your Ryerson account password immediately.
Note: If you have any other accounts that share the same password, change these as well.
Change your account recovery.
Note: You will need to sign up either using your mobile phone (sms) or an email address to recover you password (NOT both).
If you haven’t already, set up two-factor authentication for all applications.
If you had previously set up two-factor authentication, there are two actions to take:
Generate new backup codes for two-factor authentication.
Revoke “trusted” status for all two-factor authenticated devices
Note: Once status is revoked, you’ll need to re-enter two-factor authentication codes the next time you sign in from each device you use for accessing Ryerson accounts.
If you’ve activated a Google token to access Ryerson email on your mobile device or email client software, reset the Google token.
Note: Once the Google token is reset, you’ll need to enter the new token on your mobile device or email client software to access Ryerson email.
There are a variety of settings in your email that can help you determine whether your account has been compromised. Carefully check each of the following.
|Tampering Method||Corrections for Gmail Users||Corrections for RMail Users|
|Deleted content||Check Trash folder for deleted folders and messages.
||Check Trash folder for deleted folders and messages.
|Phishing attempts||Check Sent folder for messages that you did not send.||Check Sent folder for messages that you did not send.|
|Delegated sending||Click the gear icon > Settings > under Accounts, check the settings for Send Mail As and Grant Access To Your Account. Verify all information is correct.||Click Options > Identities > Local Account > check settings for Reply-To Address, Signature, and vCard. Verify all information is correct.|
|Filters||Click the gear icon > Settings > under Filters and Blocked Addresses, delete anything you do not recognize.||Click Options > under Local Account > Filters, delete anything you do not recognize.
|Email forwarding||Click the gear icon > Settings > under Forwarding and POP/IMAP, delete any forwarding rules you don’t recognize.
Learn more about Gmail’s last account activity information.
|Click Options > Mail > Local Account > Forwarding. Delete any forwarding rules you don’t recognize.
Click Options > Local Account > Forwarding. Check the Enable Automatic Forwarding and Keep A Copy setting and delete any changes you did not make.
|Autoreply and signature||Click the gear icon > Settings > under General, check your Signature and Vacation Responder settings for any changes you did not make.||Click Options > Local Account > Vacation Message. Verify the settings and Auto-Reply Message are correct.
|Alternate web sessions||When accessing Gmail via web browser, click the Details link at the bottom of your inbox > click Sign Out All Other Web Sessions. This stops all other computers from continuing to use your account.||N/A|
|Trusted systems/apps||Review and remove all "apps connected to your account"
|Redirected sent emails||N/A||Click Options > Mail > General. Check the Place A Copy In settings and delete any changes you did not make.
|Other hijacked accounts||Check email accounts delegated to you for anything suspicious.||N/A|