How To Safeguard Personally Identifiable Information

To learn more about how to protect, store, and use your PII, read the Department of Homeland Security’s factsheet. 

Understanding Ransomware

Ransomware is an ever-evolving form of malware designed to take your files hostage (encryption), rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom in exchange for releasing files (decryption). Here are some important tips that will help protect your files:

• • Update software and operating systems with the latest patches. Outdated applications and operating systems are the targets of most attacks.
  • Never click on links or open attachments in unsolicited emails.
  • Back up data on a regular basis. Keep it on a separate device and store it offline.
  • Follow safe practices when using devices that connect to the Internet.

Learn more about how to protect yourself from Ransomware.

Stay Safe While at Home and On-the-Go

• With the COVID-19 pandemic still a significant part of our daily lives, it is imperative to implement both personal and device safety measures while at home.
• Resist using public Wi-Fi to access personal accounts, make purchases, or sign into banking, credit or other applications where personal data is present.

• • Strong passwords are essential in practicing online security and protecting your information. Strong passwords are those that include uppercase and lowercase letters, numbers, special characters, and are at least twelve to fifteen characters in length.
  • Remember to never write down, share, or store your passwords overtly. Instead, use a secure password manager to organize and keep track of your passwords.
  • It is important to update your passwords frequently, setup multi-factor authentication and enable biometric login when available.
  • Avoid the “Remember Me” and “Allow Autofill” options when logging into online or mobile accounts, as these settings store your credentials on the device or browser in use.

Building A Digital Defense With Passwords

The United States Federal Bureau of Investigation (FBI) recommends using lengthy passphrases as passwords.

Be Aware of Email Scams

• • Phishing refers to a type of social engineering attack, in which a cybercriminal sends deceptive emails in an attempt to infect a user’s device with malware and/or obtain personal information, such as credit card numbers, login credentials, and other sensitive material.
  • These messages often use verbiage that creates a sense of urgency, so that the user is more likely to panic and act quickly on the fraudster’s requests.
  • Phishing emails are frequently centered around current events, like the COVID-19 pandemic; or sent at specific times of year, such as tax season.
  • Always be cautious when opening attached files as they can potentially have malicious programs embedded in them just waiting to be run by an unsuspecting user.
  • It is important to always think before you click, especially if the sender appears suspicious or if you were not expecting the email. Practice hovering your mouse over hyperlinks to see where they are really taking you.

How To Spot A Social Engineering Attack And How To Avoid Them

To learn more about how to spot a social engineering attack and how to avoid them, visit the United States Cybersecurity and Infrastructure Security Agency (CISA) website and review their tips on Avoiding Social Engineering and Phishing Attacks.

Don’t Answer That Call

• • Voice phishing, or Vishing, is a social engineering scheme, that aims to gather personal and confidential information using verbal scams.
  • Like phishing, vishing calls may evoke a sense of panic, and attackers will attempt to persuade their victims to provide sensitive, personal material over the phone.
  • Cybercriminals may even leverage programs that can create bogus phone numbers using local area codes and numbers, or ones that resemble a reputable organization’s business number.
  • If you suspect that you might have received (or are on) a vishing call, it is always best to hang up and verify legitimacy by calling an official, public phone number of the company in question.

Federal Trade Commission’s National Do Not Call Registry

You may also wish to register for the Federal Trade Commission’s National Do Not Call Registry which will greatly reduce the telemarketing calls your number receives, and help you spot a possible vishing attack. 

Identity Theft Best Practices and Resources