Possibly Compromised CWL Accounts – Stuffak.com

The website, Stuffak.com, no longer requests CWL credentials from new users and no longer poses a threat in this regard. Users should continue to exercise caution when providing personal information to any online source.

Please remember to notify security@ubc.ca of the possible temporary breach of your UBC CWL account.

The original reported security risk is quoted below:

Reports of a website requesting both personal and UBC account credentials have been received. The website, Stuffak.com, appears to be an online marketplace for users to buy and sell items. Upon creating an account at the suspected website, users are asked to provide their UBC Campus Wide Login (CWL) credentials (username and password) as proof of their affiliation with UBC.

Physical posters for the suspected website have been posted in various buildings on the UBC Vancouver campus.

Stuffak.com is not part of the University of British Columbia. CWL credentials are critically important and provide access to your confidential information at UBC; these credentials should only be provided to sites that are officially authorized by the University. If you think you may have submitted your UBC CWL or login account credentials, go to the CWL myAccount site and login to change your password immediately.

Please remember to notify security@ubc.ca of the possible temporary breach of your UBC CWL account.