Compromised Accounts

Binghamton University email accounts are periodically compromised and used to send spam messages. Sometimes the account holders notice the activity. Other times, ITS or Google identifies spamming or misuse, and acts to disable access or functionality on the account to stop further unauthorized access.

In either case, to regain access to the account, you can reset the password at our self-service website, That website lets you use your alternate contacts to receive a Security Code to access the Password Portal. Once logged in, you can create and confirm a new password that synchronizes with both BU and BMail accounts.

Once you regain access, we recommend the following to secure the Bmail account:

  • Log in to your Bmail account's Security Checkup and sign out of any devices that you do not recognize.
  • Set up Google 2-Step Verification by clicking on the Binghamton University logo in the upper right corner of the BMail web page, and select the Manage your Google Account button. On the account page, select the Security menu item from the left side of the page, and then select 2-Step Verification to get started with the process. Full instructions are available in this article:
  • Check your Settings in Bmail to verify that your forwarding address, signature, and filter settings are unchanged, and that "Send mail as:" under the Accounts tab is correct. You should also check that your Contacts list is not populated with unknown addresses.

Account compromises usually occur when the account holder responds to a phishing scam in which they are asked to reply to an email, or visit a website, and supply personal information. No reputable organization would ask you to provide personal information in this way, so NEVER respond to such requests. If you're not sure if you should trust an email message, please contact ITS for advice before taking any other actions.

Compromises also occur when passwords are obtained through an infected computer or an online database breach. To avoid these as best as possible, be sure to regularly run full antivirus and antimalware scans on your devices, and use unique, strong passwords with each online system. Password managers can help create strong passwords and keep them secure.

For more information about passwords, visit the ITS web page:

If you need assistance implementing the suggestions above, please call the Help Desk at (607) 777-6420 or send an email to

Print Article


Article ID: 610
Mon 9/12/22 4:17 PM
Thu 9/14/23 1:43 PM