It’s easy to believe that cyber attacks only happen to other people. Yet in today’s digital world, almost everyone has received a fraudulent email, text message, or other suspicious communication. Cyber criminals can target any account or device connected to the internet—often without warning.
The mindset of “it won’t happen to me” leaves both personal and university information vulnerable. Fortunately, simple, consistent habits can significantly reduce risk and help keep your data—and the UBC community—safe.
Why This Matters at UBC
Every day, faculty and staff work with personal information (PI) belonging to students, colleagues, and partners. This includes identifiers like CWL IDs, employee numbers, and student numbers, often combined with other sensitive details.
These credentials provide access to valuable information. When accounts are compromised, the information they contain could be exposed to unauthorized individuals.
Recognizing the Tricks Cyber Criminals Use
Cyber criminals rely on urgency and emotional responses to persuade people to reveal sensitive information. Understanding how these tactics work makes them easier to recognize—and avoid.
Phishing and Social Engineering
Phishing is a common tactic where an email or message pretends to be legitimate, but leads to a fraudulent website or requests personal information. These messages might appear to come from trustworthy sources, including people you know, since a friend’s account may have been compromised.
Pause before clicking on unexpected links or opening attachments. If a message feels odd, verify it through a trusted method.
The Golden Rule for Sensitive Information
Legitimate organizations—including UBC, banks, and government agencies—will never ask you to share sensitive information such as passwords, credit card numbers, or personal identity details through email or phone.
If a message or call asks for this kind of information, treat it as suspicious. Do not respond or click; verify first.
Practical Steps to Protect Work and Personal Accounts
Cybersecurity doesn’t have to be complicated. A few thoughtful habits can help protect information at work and at home.
| 1) Strengthen Your Digital Locks | Use unique and complex passwords or passphrases across all your accounts and devices. Avoid using personal details—like a child’s name or a pet’s name—that could be guessed from social media or other public information. A password manager can help keep track of credentials securely. |
| 2) Enable Multi-Factor Authentication (MFA) | Multi-factor authentication adds an extra verification step before you can access an account. This additional layer—such as a verification code or biometric confirmation—helps keep accounts secure even if your password is compromised. Enable MFA wherever possible, including personal accounts. |
| 3) Secure Your UBC Data and Devices | Your devices are essential tools for teaching, research, and administration—but they must be protected.
Small actions taken regularly make a big difference. |
Protecting Our Community
Cyber threats evolve constantly, and staying informed helps protect everyone. When you strengthen your passwords, enable MFA, and secure your devices, you protect more than your own data—you protect the people whose information you handle every day.
These habits help prevent unauthorized access and support our shared responsibility to keep personal information safe and confidential.
Cybersecurity is a collective effort. By taking simple steps and staying aware, we can all help keep our community strong and resilient.