Passwords of individual users hijacked

A student in Haaga-Helia has had a case where MS Authenticator application has requested confirmation even though no login has been made. This is a sign that the password has been leaked.

We remind users that unwarranted Authenticator requests should not be verified. If Authenticator reports an attempted login and you haven't tried to sign in, immediately change your password and report the incident to IT-HelpDesk. If you use the same password for other services, change the password to all of them.