The quickest way to report a Security Incident is to contact the Help Desk. They might be able to answer your question immediately or submit a ticket for someone on the Information Security team. If you just have a question you can contact security@lehigh.edu and we will respond in a few hours or next business day.

Report a Phishing or Suspicious Email

Phishing emails try to trick you into giving up your password, clicking a malicious link, or opening an infected attachment. If you receive a suspicious email, do not click any links or open any attachments.

When you forward a suspicious email to spam@lehigh.edu, an AI Analyst reviews it automatically and replies letting you know whether the message is safe or spam. If the message is identified as spam or phishing, it's automatically escalated to a human analyst on the Information Security team for further review.

If You Haven't Clicked Anything or Entered Any Information

  1. Forward the email to spam@lehigh.edu. Forward it as an attachment if possible so the headers stay intact.
  2. Delete the email once it's been forwarded.
  3. No further action is needed unless you're contacted by the Information Security Office with follow-up questions.

If You Clicked a Link or Opened an Attachment

  1. Disconnect the device from the network (turn off WiFi or unplug the ethernet cable).
  2. Do not enter any passwords or personal information on any page the link took you to.
  3. Forward the original email to spam@lehigh.edu if you're still able to access it.
  4. Contact the Information Security Office immediately at security@lehigh.edu or through the Help Desk. Let them know what you clicked and what happened.

If You Entered Your Lehigh Password

  1. Forward the original email to spam@lehigh.edu if you're still able to access it.
  2. Contact the Information Security Office immediately at security@lehigh.edu. Include the approximate time you entered your password and the page it was entered on, if you remember it.
  3. The Information Security Office will check your account for signs of unauthorized access, lock your account, and guide you through any additional steps.

Not Sure If It's Phishing?

When in doubt, forward it to spam@lehigh.edu. You'll get an automatic reply letting you know if it's safe or spam. Reporting a legitimate email by mistake costs nothing. Not reporting a real phishing attempt can cost your account, your data, or someone else's.

For examples of common phishing tactics and how to spot them, see the Phishing Guide.

Report Lost/Stolen Device

Lehigh Owned or Device with Lehigh Data

  1. Reset your Lehigh Password
  2. File a Police Report:
    1. Depends on Locality
      1. On-campus - LUPD
      2. Off-campus - with local police department
    2. Get a case number
  3. Contact your Computing Consultant (CC), to help you gather the following information:
    1. Device serial number and model name/number
    2. MAC address of the device
    3. Was the device backed up?
    4. Did the device have full disk encryption enabled and managed by ITS?
  4. Then email the Information Security Office (security@lehigh.edu) with the following information:
    1. The timeframe of the theft/loss
    2. Date and time when you changed your password after the theft or loss
    3. Police case number
    4. Was there any protected data stored on the device? (https://data.lehigh.edu/classification-data)
    5. Was there any human subject research data stored on the device? (https://research.lehigh.edu/human-subjects-research)
    6. Did the device store data that was governed by a Data Use Agreement, Confidentiality Agreement, Non-Disclosure Agreement, or another contract with a third party?
    7. The information you provided your CC

Personal Device

  1. File a Police Report:
    1. Depends on Locality
      1. On-campus - LUPD
      2. Off-campus - with local police department
    2. Get a case number
  2. Other Steps to Protect Yourself
    1. If device was unencrypted:
      1. Assume all data on device is compromised. If you had sensitive personal data you could:
      2. Freeze your credit - to prevent someone from using your data to open up a credit account
      3. Sign up for a credit monitoring service
  3. Contact the Information Security Office (security@lehigh.edu):
    1. If you have additional questions you can contact us and we will provide specific guidance.

Information Security Office (ISO)

security@lehigh.edu