InfraWare Security Alert (Heartbleed) Details

Overview

You many have heard about the so-called "Heartbleed" SSL security vulnerability being discussed in the news.  This is a very serious threat to online user accounts.  Fortunately, an internal review has determined that InfraWare services do not rely on the faulty SSL module being discussed.

There is still a concern, however.  Some users might be using the same username (email address) and password for InfraWare 360 that they use for other websites that are subject to this vulnerability. If/when that is the case, the hackers involved could acquire those credentials.  Then, realizing some users do this, they could potentially try to use them to login to other websites, potentially including InfraWare.
 
What you should do

We are recommending that you consider this concern for yourself and also advise all users in your InfraWare Account (admins, transcriptionists, authors, etc.) to do the same.  If there is any chance that the password used in InfraWare has also been used on one or more other websites, please change in promptly to something completely unique.

Taking this step promptly is essential to avoid the risk of your account and associated PHI becoming compromised.  If you have any questions, please open a support ticket.  If you would like to read more about the Heartbleed SSL vulnerability this is a good article on the subject.
 
Sincerely,
 


Nick Mahurin
CEO

Change Your Own Password

To change your password in the InfraWare 360 platform go to the Tasks page and select 'Change my password or email address' - here.  See KB536 for details on how to reset your password.

Force a Password Change for an InfraWare User

For Administrators - See KB336 for details on how to force a password change for InfraWare users under your Account.