About the Chegg data breach

In April 2018, textbook reselling site Chegg.com experienced a data breach, publicly exposing the passphrases of Indiana University customers. IU has evidence that attackers are actively using the information associated with this breach. If your password has been exposed, you will be notified via email. The exposure means that your password is now considered public information, and it is no longer secure or secret. You should change it immediately everywhere it is used.

Additional considerations:

• If Chegg has provided information about changing your Chegg password, you should follow those instructions. If you have not heard from Chegg about your stolen account information, you should log into the Chegg website and change your password now.
• If the password you used on Chegg was also used on other sites, you should also change your password on those other sites.
• It is never a good idea to share passwords between sites. There are password managers that can help you maintain distinct passwords on different sites and also safely store those to enable easy access when needed. LastPass, KeePass, and 1Password are some that IU recommends for personal use.

For more about the Chegg data breach, see Chegg resets 40 million user passwords after data breach.