AQA hack: identified cyber-attack on our online examiner systems

[Meldrew]

Received this from AQA - I think its legit as far as I can tell. I've not included the FAQ which really wasn't that useful...

 

Meldrew

 

I’m writing to let you know that we’ve identified a cyber-attack on our examiner application system and examiner extranet, and some of the data you had given us was accessed.

 

In our investigation, we identified that the data accessed included your:

 

title, first name and surname

address and post code

personal and work telephone numbers

email address we use to communicate with you

email address listed on the extranet (which was your extranet username)

CMI+/QMS/OLS password

examiner pin

memorable word (used for a ‘forgotten password’)

centre number.

The systems that were attacked do not store bank details, data belonging to schools or students taking our exams, or exam material.

 

We are resetting all passwords to the online marking system (CMI+), the online mark collection system (QMS) and the online standardisation system (OLS). If you are currently using these systems, you will receive a new password shortly; otherwise you will receive it just before you need to access them.

 

We are very sorry that this has happened and would like to reassure you that we take cyber security very seriously and have measures in place to protect everyone’s personal information. While this did not prevent the malicious activity, it did help us limit the impact. We were able to identify the attack in a very short period of time and take our systems offline to fix the security issue, and carry out our investigation.

 

We understand that you might have further questions and so I’ve included some more information below. You can also contact us at [email protected] or on 0800 197 7163.

 

Kind regards

 

Mike Elliott

Head of Operations

[pcstru]

Well if it is true :

 

CMI+/QMS/OLS password

 

They need to be shot.

[pete]

Does anyone know if this affects teachers who do part-time marking for AQA?

 

A call to the above helpdesk wasn't that reassuring (the person I got had only just started there and was thrown a bit by my query). And (given they're storing password in the clear and historical interactions) I trust AQA about as far as I can throw them.

[ITGuyNW]

Does anyone know when E-AQA will be back up?