Dear faculty, staff, and students,
The following email is a phishing attempt to steal your AndrewID and password. The email is faked to appear to come from Human Resources and claims that your email address was changed in Workday. The Workday link points to a web form to collect your AndrewID and password.
The rest of the email text has links to our website and phone numbers designed to convince you that the email is actually from Human Resources.
Please delete any similar email. Please let us know immediately if you clicked and gave your AndrewID.
Khalid Sarwar Warraich | Chief Information Officer
From: HR Services <hr@cmu.edu>
Date: January 17, 2017 at 10:01:13 PM GMT+3
To: undisclosed-recipients:;
Subject: Email addresses updated
This email is to confirm that you have successfully updated
your email via Workday (link deleted).
This update occurred on 01/17/2017 at 09:53 a.m.
If you did not update this information online, please go
to http://www.cmu.edu/eid/help/stolen.html
or call the Information Technology Services (ITS) Help
Desk at 800-422-000 for assistance.
Please note that if you have multiple email accounts with
Us, you may receive this message at each email
address. If you performed multiple updates, you may also
receive separate email confirmations.
Thank you,
HR Services