These are the people I work with....

First Email

There are reports of a new email-based phishing attack directed at the Hopkins email systems. The subject of the message is: "VERIFY YOUR JHMI.EDU WEBMAIL ACCOUNT" and specific information is requested including password and secret question/answer. Please disregard this message.

The subject line of the message is: "VERIFY YOUR JHMI.EDU WEBMAIL ACCOUNT

The text of the message is as follows:

"This email is to inform all our {www.jhmi.edu} users that we will be upgrading our site in a couple of days from now. So you as a user of our site, you are required send us your Email account details so as to enable us know if you are still making use of your email box. Further be informed that we will be deleting all email account that is not functioning so as to create more space for new user. So you are to send us your email account details which are as follows:

User name in full :.........................
Email in full :.........................
Password:.......................................
Date of birth: ...............................
Security question :.........................
Security answer:...........................

Any email user that refuses to send his/her details within the next two (7) days of receipt this mail, his/her mail account will be deleted from the site."

Second Email- Sent 24 hours later..

The message I sent yesterday concerning an Email Phishing attack was NOT a request for anyone to send me usernames and passwords. It was a reminder not to disclose account information, and had an example of the current attempt to collect this information.

Sharing account information is never a good idea and can be a violation of University and HIPAA policies.