27 lines
1.8 KiB
Plaintext
27 lines
1.8 KiB
Plaintext
|
***************************************************************************
|
|||
|
|
COMPUTER SYSTEM ID AND PASSWORD SECURITY ALERT
|
|||
|
|
***************************************************************************
|
|||
|
|
|
|||
|
|
Unidentified individuals representing themselves to be from a
|
|||
|
|
number of US Sprint departments (corporate security, a technical support
|
|||
|
|
group, a systems engineer abd others) are calling Sprint and Sprint
|
|||
|
|
International employees in an attempt to obtain employees' individual IDs
|
|||
|
|
and passwords. These unidentified individuals state that they are
|
|||
|
|
troubleshooting a problem with a system and need the employee's ID and
|
|||
|
|
password to verify proper operation of the system. According to Cliff
|
|||
|
|
Hall, senior vice president of information management, an ID and password
|
|||
|
|
for a Sprint International system was obtained in this manner, and the
|
|||
|
|
system was penetrated.
|
|||
|
|
Under no circumstances should an employee give his or her ID or
|
|||
|
|
password to any individual, including another employee. If anyone contacts
|
|||
|
|
you and asks for your ID or password, ask for the name and phone number of
|
|||
|
|
the person requesting the information, then notify your director of the
|
|||
|
|
request. If you have inadvertently given out your ID or password,
|
|||
|
|
immediately notify your director and contact the administrator for the
|
|||
|
|
system in question so your access parameters can be changed. All requests
|
|||
|
|
and inadvertent disclosures should also be reported to corporate security,
|
|||
|
|
1-800-xxx-xxxx
|
|||
|
|
The protection of IDs and passwords is in accordance with US Sprint's
|
|||
|
|
Executive Policy No. 9.9 and Addenda thereto. IDs and passwords are
|
|||
|
|
considered proprietary information and must be protected at all times.
|
|||
|
|
|