Protect your personal information

Note: this post originally appeared as an email sent to Hopkins students.

Dear Students,

The cybersecurity team has identified several phishing attempts and a potential cybersecurity risk targeting Johns Hopkins students. These involve individuals posing as a Johns Hopkins faculty member and unauthorized digital services claiming to help with official university processes for a fee (e.g. services that claim to support course registration). Their goal is typically to steal JHED credentials or solicit funds under false pretenses.

If you believe you may have entered your JHED ID or password on a suspicious or unauthorized website, you should reset your JHED password immediately. You can do so at my.jh.edu. If you need assistance, please contact the IT Help Desk at support.jhu.edu or 410-516-HELP (4357).

To help protect yourself and our community, please keep the following in mind:

1. Official university communications come from a Johns Hopkins email address. Most scam attempts originate from a non-Hopkins account (such as Gmail) or spoofed addresses made to resemble official ones (e.g. [email protected]). Messages from external accounts will always contain a warning image at the top (“External Email – Use Caution”) so that you can pause to confirm the message’s legitimacy.
2. Never enter your JHED credentials into any system not authorized or affiliated with Johns Hopkins.
3. Be skeptical of urgent or unsolicited requests for personal information and/or money. Messages that pressure you to take quick action—such as clicking a link, downloading a file, or verifying your account—are red flags.
4. Watch out for fake login pages and suspicious links. Some phishing emails direct you to sites that closely resemble Johns Hopkins login or authentication screens. If a site seems suspicious, do not log in. Report suspicious messages or sites by forwarding them as an attachment to [email protected].

Please reach out if you are uncertain about a message or website you encounter. You can always contact the IT Help Desk at support.jhu.edu or 410-516-HELP (4357) at any time for guidance. Additional guidance can also be found at https://phishing.jh.edu.

Thank you for your awareness and diligence in helping to keep your information and our university community safe.

Sincerely,

Rachelle Hernandez
Vice Provost for Student Affairs

Janet Rathod
Chief Information Security Officer
Johns Hopkins University & Medicine
Information Technology at Johns Hopkins