The University of Virginia announced today (Aug. 16) that it has successfully completed a comprehensive system security upgrade in response to a cyber attack originating in China. The University took these actions to further enhance the security of data and information stored on University resources and to aid in prevention of future cyber attacks.

The system upgrade started on Friday at 5 p.m. The affected systems were brought back online Sunday.

The University is now requiring users to change their Eservices login passwords.

“We thank the members of the University community for their patience as systems were being upgraded,” U.Va. Executive Vice President and COO Patrick D. Hogan said.  “The security of your information and other data stored on University systems is of the utmost importance, and our dedicated teams of professionals will remain vigilant in protecting the University’s information technology infrastructure.”

There was no evidence that the attackers accessed personally identifiable information — such as Social Security numbers and banking information — or personal health information. There was also no indication that sensitive research material was accessed.

For technical questions related to the system upgrade or the password change, members of the University community should call the U.Va. Help Desk for IT at 4-HELP (434-924-4357) or toll-free 866-469-4866.  For general information about this incident, please call toll-free 877-939-6228.

ITS Frequently Asked Questions

What do I need to do?

With systems back online, you need to change your Eservices password.

What is an Eservices password and how do I know if I have one?

You use your Eservices password for access to the UVa Exchange Service* (email and calendaring, sometimes referred to as “Outlook”), login to classroom and library computers, network printing, the UVa Hive, Premium Server clients (ES1 and ES3), Home Directory Service, and SharePoint. It can also be used to log into NetBadge. Most faculty, staff, and students have an Eservices account and password.

This account is NOT used for Medical Center email or clinical systems.

* This does NOT include Health System/Medical Center, Darden, or McIntire email services.

How do I change my password on my computer and my mobile devices?

1.     If you have a mobile device(s) and read your UVa email (except for Darden, McIntire, and HSTS) on it, put it in “airplane mode.” If not, proceed to step 2. 

2.     On your computer go to https://whois.virginia.edu/password.  

3.     Change your password and then immediately shut down your computer.

4.     With your mobile device(s) still in airplane mode, change your email password to the password you created in step 3 above on each device. *

5.     Wait 15 minutes and restart your computer.

6.     Log into your computer, launch email, and enter the new password if prompted.

7.     Take your device(s) out of airplane mode.

8.     For Windows users: you may need to use your cached (old) password to log into Windows until your PC receives your new password from the Eservices domain servers.  

* On certain Android and other mobile devices you may have to delete the email account and set it up again in order to change the password.

Where do I go for help if I have technical questions? 

Call the UVa Help Desk for IT at 4-HELP (434-924-4357) or toll free at 866-469-4866.     

For additional information refer to the Information Technology Services website.