January 30, 2026
Phishing Emails
IT Services recently responded to a security incident involving a targeted social engineering (phishing) attack. IT Services has confirmed the following malicious indicators of compromise (IOCs):
Email Subject Lines:
- MTBLUE ITEMS SALES
- ITEMS FOR SALE
- Employee W - 2 Update
- Document shared with you: "Important Payroll Updates Effective by Christian M. Elkington Superintendent.docx"
These emails were not legitimate communications and were designed to trick recipients into providing sensitive information or clicking on malicious links. If you interacted with any of the malicious emails (opened the shared document, clicked on a link or corresponded with anyone via an email address listed in the email) please take the following immediate actions:
Change your Google account password immediately.
- Go to your Google Account at myaccount.google.com.
- On the left navigation panel, click Personal info.
- Under "Profile," click Password. You might need to sign in.
- Enter your new password, then click Change Password.
- Please choose a strong, unique password that you haven't used before.
Log out of your Google account on all devices you are logged in on. To do this:
- Go to your Google Account at myaccount.google.com.
- On the left navigation panel, click Security.
- Under "Your devices," click Manage all devices.
- You’ll see devices where you’re currently signed in to your Google Account. If you see any devices you don’t recognize or that you no longer use, click the carat (>) next to the device and select Sign out.
Confirm that Multi-Factor Authentication (MFA) is enabled on your account. MFA adds an extra layer of security to your account, making it much harder for unauthorized individuals to gain access, even if they have your password. To enable MFA:
- Go to your Google Account at myaccount.google.com.
- On the left navigation panel, click Security.
- Under "How you sign in," click 2-Step Verification.
- Follow the on-screen instructions to set up MFA using your preferred method (e.g., phone prompts, authenticator app, security key). If you need assistance, please refer to the district guidance communication: Moving to MFA.
If you use the same username and password for your Google account on other websites or services, you should change your login credentials on those platforms as well. This is crucial because if your Google account information has been compromised, those other accounts may also be at risk.
If you downloaded any attachments from the suspicious email, do not open them. These attachments may contain malicious software. Please contact the IT Department immediately at (207) 779-9888 or techhelp@mtbluersd.org for guidance on how to safely handle them.
If you provided any personal or financial information in response to the email or on a linked website, please contact the IT Department immediately at (207) 779-9888 or techhelp@mtbluersd.org. This information could be used for malicious purposes. You may also want to contact your bank and/or credit card companies to alert them to the situation.
This incident is a critical reminder to always be vigilant when checking your email. Phishing attempts are designed to trick you. Always be suspicious of emails that create a strong sense of urgency, request your password, or ask for personal information. Look closely at the sender's email address and check for poor grammar or spelling, as these are common red flags.
December 30, 2025
PowerSchool - Isaac Libby
- Put in a tech support ticket using the iiQ portal (select New Ticket > Technology Support > PowerSchool SIS or select the PowerSchool SIS Quick Ticket at the top of your iiQ dashboard)
- Email powerschool@mtbluersd.org. This will create a ticket in our system and automatically assign it to Isaac.
- Once you have created a ticket using one of the above methods, any correspondence related to your request will come from MBRSD Helpdesk. Be sure to check your email and respond to any requests.
- You can still call extension 4129 for urgent matters but for all non-urgent issues, please use the ticketing system to request support!
December 10, 2025
Stay Vigilant - Cyber Grinches
As we head into the festive season, we want to wish you all a joyful, relaxing, and safe holiday break filled with good cheer!
While you’re shopping online for last-minute gifts, clicking on e-cards from “Santa” or checking those too-good-to-be-true holiday deals, please remember to stay vigilant. Cyber grinches are extra active this time of year.
A quick reminder:
- Think before you click – phishing emails and texts often disguise themselves as delivery updates, e-vouchers, or charity appeals.
- Shop only on trusted websites (look for https:// and the padlock).
- Avoid public Wi-Fi for banking or sensitive transactions.
- Keep your devices and apps updated.
- If something feels off (unexpected requests for passwords, urgent payment demands, strange links), pause and verify – reach out to IT or the sender through a known channel.
- The 'Amazon return' is a common scam. Amazon will never contact you and need to connect to your computer to help with a return.
- If you *do* make a mistake, let us know! Don't be embarrassed, we are happy to help make sure you stay secure after a cybersecurity incident.
Your safety matters to us year-round, but especially now. Let’s keep the holiday spirit joyful and scam-free! Wishing you and your loved ones a wonderful Christmas and a happy, healthy New Year.
December 5, 2025
Google Meet Restriction - Students
As of Friday afternoon, student Google accounts have been configured to restrict their ability to start a Google Meet call. This change does not affect staff accounts and it does not restrict a student's ability to join a Google Meet call created by another user. Please let me know if this change causes an issue with your teaching.
November 17, 2025
GMAIL - District Populated Email Addresses
Due to a number of recent security incidents involving compromised student accounts, we have limited access to the domain directory to only staff accounts. Students will no longer see all email addresses in our domain when they start typing in the To: field of a new email. The list will still populate with any addresses that they have previously emailed as those addresses are automatically added to a users "other contacts" list in their own contact app. They will also still be able to email anyone they want but they will need to know the address of the person they want to communicate with and will have to type out the entire address.
November 5, 2025
IncidentIQ Support Portal
We're currently developing two new categories of support requests that will eventually be available through iiQ:
-
Facilities Requests (e.g., maintenance, repairs)
-
Event Scheduling Requests (e.g., reserving district spaces)
Important Note on the New Options
While you may see these new options listed in the portal as we continue development, they are not yet operational or ready for staff use.
Please continue to use the existing processes for submitting facilities and event scheduling requests for the time being. We will send a formal announcement and provide training before these new features are officially launched and ready for you to use.
October 16, 2025
District Website Updates
In an effort to keep our district website as up to date and fresh as possible, we are implementing a district-wide process to allow staff to send along information for our webmaster to use to update the various pages. Click this link access the Form. You are encouraged to bookmark this link as well, so you can send updates whenever you need to.
Once complete, the request will be sent to our ticketing system so we can get to work on them! If we have questions, we'll communicate through the ticketing system so keep your eyes open for emails from MBRSD Helpdesk.
September 23, 2024
YouTube Videos
Google recently made changes to our Google Workspace for Education account that impacts how students can access YouTube.
For security and privacy reasons, Google has updated its policy to restrict general access to YouTube for all students in OUs not designated as over 18. This means students will no longer be able to freely browse or search for videos on YouTube using their school accounts.
However, students will still be able to watch videos when they are provided with a direct link. To ensure your students can continue to access educational content, please link any necessary videos directly within your Google Classroom assignments, announcements, or materials. This method will allow them to view the content without having to navigate the full YouTube platform.
- Technology Integration and Support Questionnaire
- PowerSchool SSO
- Multi Factor Authentication (MFA)
- Security Upgrades
- iPad Update Sessions
- Swank
- Printing and Copying
- Technology Grants
- PaperCut
- App/Digital Resource Approval Process
- Google Chrome Extensions
- New App Request Procedure
- AI/ChatGPT
- Phone Changes
- Phishing and Cybersecurity Awareness
- Summer Technology Institute
- Managed Apple IDs
- Device Software and Security Updates
- Google Chrome Apps and Extensions
- New Helpdesk Ticketing System