SUBJECT:

The Heartbleed Bug and IT Security

A computer bug called Heartbleed was detected by a group of researchers last week and it was revealed widely within the IT community this week. The Heartbleed bug can potentially allow malicious hackers to steal personal information, such as passwords and credit card numbers.

Upon learning about this threat, our security team immediately scanned all UC San Diego campus-wide IT enterprise services and we determined that none of our enterprise services are vulnerable to this bug. Our security team is closely monitoring all of our information systems.

If you operate a UC San Diego information system and need assistance in securing your services, please contact our IT security team at security@ucsd.edu.

Since the Heartbleed bug impacted many commercial Internet services, as a precaution, we strongly encourage you to change the passwords of your personal (non-UCSD) user accounts.

If you have questions regarding the Heartbleed computer bug, please contact the ACT Help Desk at acthelp@ucsd.edu or at (858) 534-1853.

Min Yao Interim Chief Information Security & Privacy Officer Assistant Vice Chancellor Administrative Computing and Telecommunications