Last week, we were notified that MLS account credentials were used without authorization to send phishing emails. The MLS system vendor has taken action to prevent further misuse, including blocking these accounts.
To be clear, this was NOT due to any breach of CRMLS’s data or servers; neither your listing data nor your client information has been compromised. Early analysis of the situation suggests password sharing or poor password hygiene as the root cause.
What we need from you:
As a necessary precaution, and for the security of our entire membership, we are requiring a password reset for all CRMLS users. Thank you to all who have done so already and, for those that haven’t, please do so as soon as possible.
Security awareness and a consistent practice of strong security protocols—including good password hygiene—are essential in today’s cybersecurity landscape. Strong passwords that are rotated every 60-90 days will go a long way in protecting you and your business.
To keep your account secure from unauthorized access, we recommend following the CISA’s suggestions for strong passwords. In general, make sure your passwords are:
- Long (over 16 characters)
- Random (a mix of letters, capitalization, and special characters)
- Unique (don’t reuse passwords on multiple sites)
We understand having to change your password is an inconvenience for your day-to-day, but maintaining the integrity and security of our systems and your data is our highest priority.
Thank you for the support.
California Regional MLS
Read This Latest GAOR Social Media Post!
