A knowledge base article about Why did I get a Credential Exposure notice and what should I do? provided by the UC Berkeley IT Service Hub - Knowledge Portal
The Information Security Office (ISO) regularly detects or receives reports of campus affiliate credentials that have been exposed, particularly CalNet credentials. Re-securing exposed accounts and resetting passphrases quickly is critical to preventing exploitation or more serious abuse.
Did you receive an email from security@berkeley.edu with Credential Exposure in the Subject line?
Please see our Respond to a Security Notice page for detailed information and instructions on how to respond.