Repeated from LITA listserv, sorry for cross-posting:
I got wind of this from our IT folks who saw the article. I couldn’t find much information on this besides the article, but we thought “better safe than sorry”.
In Elsevier’s AdminTool you can download a list of active accounts – minus staff, we had 35. You could then set up a mail merge in Word (using email) and send out personalized emails (instead of one general email to everybody on the list
where they can all see each others’ details). This does take some time sending out individual emails from your Outlook. Your IT department may have better ways of doing this, especially for much larger lists.
I also used this as an opportunity to promote our computer science-related e-books to IT Security. We are putting a lot of money into Springer and Elsevier e-books, might as well get staff using them and maybe save a little money on their
side.
Thanks,
Diane Westerfield, Electronic Resources & Serials Librarian
Tutt Library, Colorado College
diane.westerfield@coloradocollege.edu
(719) 389-6661
From: Serials in Libraries Discussion Forum [mailto:SERIALST@LISTSERV.NASIG.ORG]
On Behalf Of Rodriguez, Michael
Sent: Thursday, March 21, 2019 2:26 PM
To: SERIALST@LISTSERV.NASIG.ORG
Subject: [SERIALST] Elsevier data exposure
This email originated outside Colorado College. Do not click links or attachments unless you know the content is safe.
“Education and Science Giant Elsevier Left Users’ Passwords Exposed Online.”
https://motherboard.vice.com/en_us/article/vbw8b9/elsevier-user-passwords-exposed-online
Looks like no institutional credentials were exposed, “only” the passwords and email addresses of individuals who set up personal accounts with Elsevier’s products. Nevertheless, this is a serious privacy
and security breach.
Regards,
Michael Rodriguez
Vice President, ACRL New England Chapter
Licensing & Acquisitions Librarian
University of Connecticut
369 Fairfield Way U-1005B | Storrs, CT 06269
michael.a.rodriguez@uconn.edu |
860-486-9325
To unsubscribe from the SERIALST list, click the following link:
http://listserv.nasig.org/scripts/wa-NASIG.exe?SUBED1=SERIALST&A=1