Even if you’ve never worked with MIT Federal Credit Union, this is still a relevant warning. I sometimes receive emails that look like they’re from a lender or title company asking for information or directing me to click on a link or open an attachment. The emails look exactly like an email you might get telling you to download docs here or to see the attached closing disclosure. It looks legit in every way. But the two red flags for me are, one, none of my companies would send me docs in that way, and two, I know what’s on my schedule and if I don’t recognize the title company or lender, I’m not opening diddly.

From MIT:

MIT Federal Credit Union has been informed that you may have received a phishing email from Christian Lazowy at MIT Federal Credit Union. If you received an unexpected email asking for information and provided it, your information could be at risk.

Steps to take:

Change your email password.

Contact your Information Technology department or IT security department.

There is no threat to any member accounts, and no information is at risk. We take security very seriously and ask you to do as well. Here are some precautions to take:

Confirm the sender's identity before replying to email requests and before opening attachments or clicking on links, even if they appear to come from a legitimate source.

Consult your Information Technology department about any phishing attempts.

Call us to validate communications from MIT FCU.

No MIT Federal Credit Union employee will ever contact you by text or email requesting you enter confidential information to open an attached document.