Information Security Services urges faculty, staff and students who have downloaded the new Microsoft Outlook app for iOS and Android to be aware of possible security risks with the application. Although the app is a legitimate Microsoft product, it has raised privacy concerns among information technology experts.
The product, now available in iTunes and Google Play Store, is a rebranded version of the Acompli email app that Microsoft recently acquired. The security and privacy concerns center on the storage of credentials and data.
Credentials such as MyID usernames and passwords are stored on the cloud, along with messages, calendars, contacts and attachments retrieved from associated mail servers. The application also makes it possible for users to share University data with unapproved outside services such as personal Google Drive and DropBox accounts.
Users should avoid sending any sensitive, confidential or personal information by email, including in attachments. Users should never place University data on unapproved cloud storage.
Information Technology Services does not support this product, but security-related questions may be directed toDefendYourData@mail.wvu.edu.