FAQs on recent cybersecurity incident

How do I know if I am affected by the cybersecurity incident?

• Current and former students and current and former Dining Service employees affected by this incident have received an email notification or letter from the university.

I am a current or former student. What demographic data of mine was obtained?

• The compromised files contained demographic data including legal first and last name, preferred name, Banner ID (90 number), PID, VT email address, ethnicity, primary college, gender, student classification (freshmen, sophomore, junior, senior), level (associate, undergraduate, graduate, professional, or medical), residency (in-state or out-of-state), local mailing address, fall and winter term enrollment indicator, and a designator to indicate transfer student, international student, first-generation student, and/or veteran.

I am a current or former Dining Services employee. What demographic data of mine was obtained?

• The compromised files contained demographic data for current Dining Services employees that included legal first and last name, Virginia Tech PID, Banner ID numbers, Virginia Tech email address, test scores related to dining employee training modules, and the name of the current dining venue worked. 
• The compromised files contained demographic data for former Dining Services employees that included legal first and last name, Virginia Tech PID, Banner ID numbers, Virginia Tech email address, test scores related to dining employee training modules, rehire eligibility status, and the name of the dining venue(s) worked.

How is Virginia Tech monitoring this incident?

• The university’s Information Technology Security Office continues to investigate this incident and monitor any suspicious activity. Virginia Tech also has security strategies, systems, and protocols already in place which are being reviewed to identify any enhancement opportunities. Additionally, the university has reported this event to the proper authorities including law enforcement.
  

What security precautions should affected individuals take now?

• Virginia Tech recommends that those affected monitor their personal accounts for any anomalous or suspicious activities and be cautious of unsolicited emails or messages asking for personal information or credentials. Always make sure to verify the sender's legitimacy before sharing any sensitive data. 
• If you are a current student or employee, it is also encouraged to change your VT Username (PID) password. To change a PID password, follow these steps.
• Additionally, Virginia Tech has temporarily modified the password reset process to require data elements not included in the breach.

Is Virginia Tech offering credit monitoring services?

• Based on the university’s investigation, the university does not reasonably believe identity theft or fraud will occur, and as such, has determined there is no need for credit monitoring.

Did this incident impact current or former faculty?

• No. Only current and former students and dining servies employees were impacted.

Who should I contact if I have technical questions, or have difficulty resetting my password?

• Technical questions can be directed to 4Help IT Support at 540-231-4357 or 4help.vt.edu. 
  

Who should I contact if I have further questions?

• Other questions may be directed to the Student Affairs division at 540-231-6272 or vpsa@vt.edu.