Michigan State University is actively monitoring and investigating a potential cybersecurity threat. MSU IT is taking appropriate steps to protect the university, its information, and the continued delivery of campus services.

All members of the MSU community are encouraged to remain vigilant and follow cybersecurity best practices. Cybersecurity is a shared responsibility, and small actions by each of us help protect the university and one another.

As a refresher from our annual Cybersecurity Awareness Training, please keep the following in mind:

Be alert for phishing. Carefully review unexpected emails, text messages, phone calls, and multifactor authentication prompts, especially those requesting urgent action or sensitive information.
Think before you click. Avoid opening unexpected links or attachments. When in doubt, navigate directly to a website or contact the sender through a trusted method.
Protect your credentials. Never share your password, authentication codes, or multifactor authentication approvals with anyone. MSU will never ask for this information.
Use multifactor authentication. Enable multifactor authentication whenever available and deny any authentication request you did not initiate.
Use strong, unique passwords. Avoid reusing your MSU password for personal accounts. Consider using a password manager to create and securely store unique passwords.
Keep devices and software up to date. Install security updates promptly and restart devices when requested so updates can take effect.
Report suspicious activity. If a message, login prompt, or account activity does not look right, report it promptly. Early reporting helps MSU investigate and respond quickly.

If you notice suspicious activity or think your account may be at risk, please contact the MSU IT Service Desk at (517) 432-6200 or submit a request with the IT Quick Request Form.

Frequently Asked Questions

What is happening?

Because the investigation is ongoing, additional details are not available at this time. Updates will be provided on this page as information is confirmed and can be shared.

Has MSU experienced a cybersecurity incident?

MSU is investigating a potential cybersecurity threat. The university is not sharing details about the investigation at this time.

Why isn’t MSU providing more information?

Cybersecurity investigations require care and confidentiality. Sharing unverified or operational information could interfere with the investigation or the university’s protective measures.

MSU will provide additional information when it has been verified and can be shared responsibly.

Is my personal information at risk?

The investigation is ongoing. If MSU determines that specific individuals need to be notified or take additional action, the university will contact them directly with instructions.

Have campus operations including the delivery/instruction of courses been impacted?

University operations including teaching and learning are continuing as normal.

Are university finances/payroll impacted by the cybersecurity threat?

No. The university has no indication that its financial systems or payroll operations have been affected.

Are university systems currently available?

Current information about the availability of MSU IT services is posted on the MSU IT Service Status website.

If a service is unavailable, continue to check the service status website and this FAQ page for verified updates.

Do I need to change my MSU password?

No password change is being requested as part of this communication.

However, you should immediately change your password and contact the MSU IT Service Desk if:

You believe someone may know your password.
You entered your credentials on a suspicious website.
You receive authentication prompts you did not initiate.
You notice unfamiliar activity associated with your account.

Never share your password, authentication codes, or multifactor authentication approvals. MSU will never ask you to provide this information.

What should I do now?

No special action is required beyond remaining vigilant and following established cybersecurity practices:

Carefully review unexpected emails, text messages, phone calls, and multifactor authentication prompts.
Avoid opening unexpected links or attachments.
Navigate directly to trusted websites instead of following questionable links.
Deny authentication requests you did not initiate.
Use strong, unique passwords and do not reuse your MSU password for personal accounts.
Install security updates promptly and restart devices when requested.
Report suspicious messages, login prompts, or account activity.

Should I be concerned about phishing?

Cybersecurity events can create opportunities for phishing and impersonation attempts. Be especially cautious of messages that:

Claim to provide confidential or urgent information about the situation.
Ask you to confirm your account or password.
Request an authentication code or multifactor approval.
Pressure you to act immediately.
Direct you to an unfamiliar login page.
Include unexpected attachments or links.

When in doubt, do not respond or use the links in the message. Contact the purported sender through a trusted method or navigate directly to the relevant MSU website.

What should I do if I receive an unexpected multifactor authentication prompt?

Deny the request. Do not approve an authentication prompt you did not initiate.

If you receive repeated unexpected prompts or believe someone may be attempting to access your account, change your password and contact the MSU IT Service Desk.

How will MSU contact me if I need to take action?

Official instructions will be distributed through established MSU communication channels. Be cautious of messages that claim to be from MSU but request your password, authentication code, or multifactor approval. MSU will never ask you to provide that information.

What should I do if I believe my account has been compromised?

Contact the MSU IT Service Desk promptly if you notice suspicious activity or believe your account is at risk or may have been compromised. Early reporting helps MSU investigate and respond quickly.

MSU IT live support is available Monday through Friday, 7 a.m. to 7 p.m., excluding university holidays:

Call: (517) 432-6200
Online assistance: IT Self-help Portal
Submit a request: IT Quick Request Form
In-person support: MSU IT walk-in locations and hours

Is this potential cybersecurity threat related to the election, or has voting information been compromised?

MSU has no reason to believe the timing of the potential threat is related to the election or that voting information has been compromised.

Where can I find updates?

Verified information and additional guidance will be posted on this page as they become available. Additional cybersecurity resources can be found at secureit.msu.edu.

When will the next update be provided?

MSU will provide another update when there is verified information that can be shared. The absence of a new update does not mean the university is no longer investigating or taking protective measures.

MSU Cybersecurity Update