The FBI has issued a Private Industry special notification informing U.S. colleges and universities of a critical exposure of academic login credentials. Stolen higher education credential information, including usernames and passwords, were discovered advertised for sale on online criminal marketplaces (dark web) and in publicly accessible forums.
This exposure of sensitive credential and network access information, especially privileged user accounts, could lead to subsequent cyberattacks against individual users and affiliated educational institutions.