Cybersecurity Awareness & Training

ICIT’s security team is committed to securing the Hunter College community’s information and information systems, protecting both our resources and data, and raising awareness about risks and ways of staying safe.

2026-03-06 Cybersecurity Alert

Hunter College has been alerted to internet, telephone, and text message identity theft scams targeting members of the community. Never share sensitive information that could compromise your personal or Hunter accounts.

Hunter College and CUNY personnel will never ask for:

Multi-factor Authentication (MFA) codes
Passwords or PINs
Social Security numbers or National Account Numbers

If you receive a request for this information, do not respond.

How to Recognize a Scam

Scam emails, texts, or calls may look real, but common warning signs include:

Strange or incorrect email addresses
Generic greetings like “Dear customer.”
Poor grammar or spelling mistakes
Unexpected links or attachments

If you cannot access an account, contact the Help Desk directly. If a transaction needs to be completed, visit the appropriate department in person. Never share sensitive information online or over the phone.

Report Suspicious Activity Immediately

If you believe you have been targeted by a scam or feel you are a victim of a crime, act immediately:

Reset your NetID and CUNYfirst password right away.
Create a support ticket using the Help Desk for assistance.
Contact the Registrar and Bursar at: https://huntercollege.freshdesk.com/support/login

Fraudulent Emails

Fraudulent emails about financial aid refunds are circulating.
Do not click any links. Delete the message.
If you clicked a link or shared information, contact StudentHelpdesk@hunter.cuny.edu immediately.

Learn More About This Notice

The Core Four

The Core Four habits of cybersecurity are simple but powerful:

Password Power: Guard Your Access

Strong Passwords and a Password Manager — create unique, secure logins. Weak or reused passwords are one of the fastest ways attackers get in. A few simple changes will keep your accounts — and our campus — safe.

Multi-Factor Authentication (MFA)

Passwords alone are not enough. Multi-Factor Authentication (MFA) adds a quick second check — like a code or approval on your phone — that stops most account takeovers.

Spotting Tricks: Phishing and Spam

Recognizing and Reporting Scams — spot suspicious messages before they spread. Scams by email (phishing) and text (smishing) try to trick you into clicking links or sharing information. Here’s how to spot them.