Google Docs Phishing Attack

posted May 4, 2017, 12:32 PM by Clifton Dancy

To parents and Hampstead Community Members,


As was reported late Wednesday afternoon throughout news and social media outlets, the Google Docs program was hit by a massive cyber phishing attack. Being a Google district, the attack was noticed within our domain and immediate action was taken to prevent data from being compromised. Students and staff were notified and given instructions that were consistent with best practices in data security.


Google released a statement late Wednesday night:

We realize people are concerned about their Google accounts, and we're now able to give a fuller explanation after further investigation. We have taken action to protect users against an email spam campaign impersonating Google Docs, which affected fewer than 0.1% of Gmail users. We protected users from this attack through a combination of automatic and manual actions, including removing the fake pages and applications, and pushing updates through Safe Browsing, Gmail, and other anti-abuse systems. We were able to stop the campaign within approximately one hour. While contact information was accessed and used by the campaign, our investigations show that no other data was exposed. There’s no further action users need to take regarding this event; users who want to review third party apps connected to their account can visit Google Security Checkup.


We want to assure our parents and school community that the Hampstead School District Technology Department works diligently at all times to ensure the security of our school, student and staff data. We commend our technology staff members for their immediate and appropriate response during this incident.


The following articles contain more information about Wednesday’s events:


Here’s Google’s official statement on today’s fast-spreading phishing attack

Google has fixed the massive Google Docs phishing attack

Google Docs warning: There's a phishing scam going around

Don’t Open That Google Doc Unless You’re Positive It’s Legit