NYSUT Retirees Beware!

Posted in Board Brief on Dec 20, 2023

NYSTRS Mobile App Scam

On April 13, 2023, NYSTRS released a statement regarding a fraudulent mobile app claiming the "NYS Retirement" App is currently available on Google Play (https://www.nystrs.org/About-Us/Press-Room/Headlines/Beware-of-Fake-NYS-Retirement-Mobile-App). Thankfully, this App is no longer available on Google Play or the App Store. The “NYS Retirement” App was not affiliated with NYSTRS. Fraudulent Apps like this attempt to steal your personal data.

Please note that NYSTRS does offer a valid, secure mobile app titled "NYSTRS Mobile". NYSTRS suggests you periodically visit the...

Password Manager Series (Part 5 of 5)

Posted in Board Brief on Nov 15, 2023

What are the things I must be aware related to Password Managers (PM)?
Regardless of PM you use, keeping your Vault login credentials safe and highly unique are vital. Do not give your Vault login credentials to anyone and do not store it electronically (if you can avoid it). The convenience of browser and universal PMs (like Apple, Facebook and Google login) come with an increased level of risk if your login credentials are stolen.

As for managing the websites you log into and the Apps you use, here are some good practices.

• Use random, strong, unique passwords.
• Where possible, let the PM ge...

Password Manager Series (Part 4 of 5)

Posted in Board Brief on Oct 18, 2023

*In nearly all cases, a Password Manager (PM) is better than no PM. However, there are differences between the types of PMs. Which is best for you depends on your online activity and your concern for security.**

• Browser: Chrome, Firefox & Safari all have added a built in PMs. Your login credential to the browser is your access to manage your Vault. They are integrated with the browser and easy to use. Your major risk is if someone gets access to your login credentials to the browser. If they do, they have access to all your login/passwords for your websites.
• Platform: Your login information i...

Password Manager Series (Part 3 of 5)

Posted in Board Brief on Sep 20, 2023

There are basically three types of Password Managers (PM).

1. Browser: Chrome, Firefox & Safari all have a PM. When you log into a site, they ask you if you want to save your login information. If you say yes, it stores it for future use. You manage your login information via the browser.
2. Platform: Your login information is tied to your universal platform (like Google, Facebook or Apple ID). Here you are using your login credentials from the platform to access a website of App.
3. 3rd-Party: They connect to your browser and Apps via a “Plug in” or Application Program Interface (API) on your device ...

What to do when affected by a Security Breach

Posted in Board Brief on Aug 16, 2023

On or about May 31, 2023, Progress Software reported to its clients of a significant security breach in their MOVEit Transfer software. MOVEit is used largely in the financial services industry (accounting, insurance, industry consultant companies, etc.) where Personal Identifiable Information (PII) is involved. In many cases, important PII was compromised including Name, SSN, DOB, Zip Code, State of Residence, Policy/Account Number, etc.

As of this release, financial services companies who use MOVEit Transfer software are informing their customers of the breach. In most cases, they are offeri...