Security - Responding to a Duo notification you did not initiate

Whenever someone tries to log into your account, Duo will send you a notification and ask you to verify that it is you. These are the steps to take if you receive a notification which you did not initiate as your account may be compromised. NOTE: The Duo phone call option for two factor authentication was disabled April 11, 2022. A phone call for authentication to UW-Platteville systems will ALWAYS be cause for concern.

If you receive a Duo push or SMS/Text that you did not initiate

1. Change your password immediately by using Password Self-Service

2. Update your challenge response questions.

3. Log into Duo Self-Service and confirm all device information is still correct.

If you accidentally approved a push notification you did not initiate

1. Change your password immediately by using Password Self-Service

2. Update your challenge response questions

3. Contact the ITS Help Desk immediately.  Please provide:
  • The time of the incident so the Help Desk can consult with our Duo administrators to determine any systems which were accessed. 
  • The system which was accessed, if known.  If the notification was provided via push, it should indicate which system was accessed.
4. Log in to Duo Self-Service and confirm all device information is still correct.
 

If you have questions, please contact the ITS Help Desk at 608.342.1400 or helpdesk@uwplatt.edu.  You may also visit the Help Desk on the first floor of the Karrmann Library.




Keywords:duo fraud compromise compromised account 2 two factor mfa hack hacked push start accept accident 2fa   Doc ID:30294
Owner:Nathan M.Group:UW Platteville
Created:2013-05-22 13:39 CSTUpdated:2022-04-12 07:57 CST
Sites:UW Platteville
Feedback:  0   0