I clicked on a link (or submitted personal info) via a spam/phishing email! What do I do?

Recently KIPP, as a whole, has witnessed an increase in emails that are phishing/spam in nature. They’ve been masked as “Memo From the Hr Dept”, “Memo from the HR Department”, or offering pianos and other services. Although we could understand the excitement for free pianos, please take the time to approach questionable e-mails with caution. See How to Identify a Spam/Phishing Email.

Of course, mistakes can happen. If you realize that you have fallen for a phishing attempt - accidentally opening a link in a phishing email and/or entering sensitive information - you should take the following steps:

1. Immediately notify the Technology team by sending email to [e-mail].
   • If your account has already been disabled due to suspicious activity, please have a fellow staff member (preferably your DSO or Manager) notify Technology on your behalf.

   • A member of the Tech team will connect with you to schedule a time and date to ensure that all necessary safety precautions are taken.

2. Reset your password by following these instructions: How to Change Your Password via Okta
3. Delete the phishing email by following the steps in What to do if an e-mail is Spam/Phishing?
4. Coordinate with your tech to run a virus/malware scan of your computer using Sophos, our anti-virus software.

Automatic Email Blocking

In most cases Microsoft's mail system will detect when your account has been compromised and will automatically disable your account from sending emails. In these cases, our Technology team will be notified by KIPP Foundation (who manages the mail system for us and many other KIPP regions) about the compromised account. Our Tech team will immediate disable your account so that no further damage can be done.

Once one of our techs has worked with you to reset your password and scan you computer, the tech will coordinate with KIPP Foundation to unblock your account so that you can continue to send and receive emails again.