What should I do if someone else has logged into eKool account and made entries?

Question

What should I do if my eKool user account has been taken over and changes have been made to it?

Answer

1. Change your eKool password immediately
   • Instructions on how to change your password in eKool - Password Change 
   • If your password has been changed during the account transfer, read more about How to reset your eKool password.
2. Find out how two-step authentication (2FA) has been bypassed
   • If necessary, change the login password for this security method (e.g. email address)
   • Has anyone had access to your phone (SMS)?
   • Is the device password known to several people (security key)?
3. If someone has sent offensive or inappropriate messages from your account:
   1. Click on the conversation -> open the menu (i) -> save the conversation as a *.pdf file. This file will be needed as evidence for the police.
   2. If you want to delete a message:
      • Click on Trash icon next to each message in the conversation to delete it. When deleting, there are two options: select Delete for everyone! Do not select the first option, which only deletes the message for the teacher.
      • Each message author has 24 hours to delete their messages, so you must act quickly.
4. If the account belonged to a teacher or class teacher, check the following:
   • Journal: Have any changes been made to grades, comments or lesson decriptions?
   • Student remarks and feedback.

5. Notify the police.
   • If it was a malicious intrusion, file a report with the police.
   • If necessary, ask for help from the school's IT specialist or principal.
   • After initiating proceedings, the police will contact eKool for additional information if necessary.
6. Notify the Data Protection Agency
   If the privacy of a student or employee's data was violated when the account was taken over:
   • The school must register the incident with the Data Protection Agency.
   • This must be done no later than 72 hours after becoming aware of the violation.

It is definitely necessary to talk about cyber hygiene! Cyber hygiene is important – pass on recommendations about passwords, two-step authentication, and account protection.