IT Services Alerts - Resolved: TCAL Users – Data Protection Breach, December 20th
First Posted: Wednesday 20th December 14:04
The following email has been sent students who registerd to use Tcal app.
We are contacting you because a Computer Science student, who created Tcal which sync’ed your timetable from my.tcd.ie to MyZone calendar, has notified Trinity that you signed-up to use this service and, in doing so, you provided your Trinity IT Account, username and password. It is strictly against published Trinity Policy to allow your Trinity IT Account, your username and password, to be used by others. Every individual is responsible and accountable for all activities carried out under their username and for ensuring their password is not divulged to anyone.
For your own privacy and IT security, you must change your Trinity password immediately and you can find details on how to do this at - Students - change your password
The student confirmed that the usernames and passwords of the Trinity students who had signed-up to use Tcal were being held indefinitely, in a readable format, on an external database service. Please remember your Trinity IT Account details can be used for unauthorised access to your own private information held in your Trinity MyZone email, your personal student record on my.tcd.ie, your Blackboard, Library or Printing & Copying accounts. Real concern was raised, regarding the privacy and security of your information, and after investigation by the College’s Data Protection Officer a Data Protection Breach has been reported to the Data Commissioner.
Everyone needs to be vigilant to the possibility that websites are offering fake or unauthorised services and unless you are sure it is a Trinity service do not enter your Trinity IT Account or MyZone username and password, even if the webpage asks for these details.
- Be extremely cautious and mindful, don't reveal your passwords to anyone else.
- Your Trinity IT account acts as your identity on the Trinity network and restricts access to your personal data to you.
- Guard your passwords and always change them if you suspect that they have become known to others.
- Learn to recognise website offering services which are not authorised by Trinity:
- Check the Web Address, if it is not https://.tcd.ie then this is not a real Trinity website
- Check that it has the Trinity Crest and Trinity branding
- Check that you can find details and access it directly from the Trinity Website. If not, then it is likely to be a fake website waiting to capture your credentials
- Check that there is a Trinity point of contact on the site with an @tcd.ie email address.