Cybersecurity Incident: August 25 Payroll Update and Q&As (1:00 pm, August 24) 

The company continues to work diligently to ensure all employees are paid appropriately while we work to restore our systems impacted by the recent cybersecurity incident. For more information about the process we are using for the August 25 payroll, please see our Bi-Weekly Payroll Update and Q&As.

 

Cybersecurity Incident: Authenticator App Update (2:00 pm, August 21)

  • If your Authenticator App was working before the cyber Incident, do not delete it. Follow the Self Service Password Reset (SSPR) process or contact your local MIS team for additional Multi-Factor Authentication (MFA) issues.
  • As expected, we are experiencing a long queue for addressing MFA issues. Please be patient as we work to get everyone back online.
  • Working with approved external business partners is permitted as long as they have reset their passwords and have the Authenticator App on their device.

 

Cybersecurity Incident: Getting Back to Work (1:00 pm, August 18)

  • Teams, Outlook and other Microsoft applications are available and should be used for normal business communications.
  • You may receive requests to log in to Microsoft applications individually as well as multiple Authenticator prompts once logged in. This will become less frequent over the next few days.
  • The Authenticator prompts may have an associated map on the notification that shows a different location than yours. That is normal, and it is OK to enter the Authenticator number and click Yes.
  • As the environment is stabilized, you will begin to see applications coming online

 

Cybersecurity Incident: Bi-Weekly Payroll Update and Q&As (8:00 pm, August 17) 

The company is working diligently to ensure all employees are paid appropriately while we work to restore our systems impacted by the recent cybersecurity incident. For more information about this process, please see our Bi-Weekly Payroll Update and Q&As.

 

Cybersecurity Incident: Restoration Update and Q&As (2:00 pm, August 17) 

  • The new network environment is up and running.
  • As expected, we are experiencing intermittent issues and the system may be slow at times, but this should be resolved during the next few days.
  • You may receive multiple Multi-Factor Authentication (MFA) prompts as you move around your system. These are OK to approve if the information on your computer matches that on your Authenticator app.
  • If you receive multiple MFA prompts at one time, reboot your computer and login again.
  • As we continue restoring our systems, you will see critical applications coming online.
  • We appreciate your patience as we work through this process. If you have any questions, please contact your local IT support.

 

Solutions to Common Issues

  • If you receive the error message “Get back into your account” – contact your local site MIS for assistance.
  • For error message “Temporary error” – try resetting your password through Self Service Password Reset.
  • For error message “Your sign-in was blocked” – reboot your computer and try resetting your password through Self Service Password Reset.
  • For error message “This has been attempted too many times” – wait one hour and try again.
  • If you receive multiple MFA prompts, reboot your computer.
  • If your account gets locked out, try unlocking your account through Self Service Password Reset. If that is unsuccessful, please contact your local site MIS for assistance.

 

Cybersecurity Incident: Reset your password (8:00 pm, August 16) 

Please reset your password using a device with internet access (examples: mobile phone, personal computer, personal tablet). Go to home.fmi.com and select the option Manage Self Service Password. If you would like step by step instructions, select Self Service Password Reset (SSPR) Instructions. If you do not have the Authenticator App already registered on your device, please contact your local site MIS team for assistance. The help desk is unable to reset passwords at this time. 

If you receive the “We’re sorry” error at the end of the password reset process, in most instances your password is still being changed. Try rebooting your computer and signing back in with your new password. If you are unable to sign in with your new password, do not continue to attempt to reset your password. Please contact your local site MIS team for assistance.

Please ensure you use a completely new password. If you receive an unsolicited MFA prompt, please deny and report it to Help Desk.

 

Cybersecurity Incident: Password issues (2:00 pm, August 16) 

Our teams are aware of ongoing password issues and working diligently to get the Self Service Password Reset (SSPR) tool restored. Please check back later. We appreciate your cooperation and patience. 

 

Cybersecurity Incident: What you can do (5:00 pm, August 11)

As our teams continue diligently working to restore our systems, we are asking that you help us by:

  • Limiting calls to the Help Desk – We are aware of the systems that are unavailable and are working to restore them as soon as possible. To allow our support teams to focus on urgent matters, please do not call the Help Desk to report outages.
  • Being on high alert for phishing attempts – Do not click on links from unknown senders, be cautious with emails with our yellow external security email banner and inspect links carefully. Review other helpful tips in the guide to phishing and email security page.
  • Reducing external file sharing and limiting your time on our network – This will help reduce overall network traffic.

We appreciate your cooperation and patience. 

 

Cybersecurity Incident (1:00 pm, August 11)

Please be advised that we are investigating a cybersecurity incident affecting our information systems. We are assessing the impact, and proactive measures are being taken to address the situation. We are working closely with third-party experts and law enforcement.

Transitional solutions are being planned and implemented to secure information systems as quickly as possible. 

Our top priority remains the safety of our employees. We ask that you please be patient and continue to stay focused on the job at hand while we work to resolve this issue.

The company will post updates regarding the cybersecurity incident as they become available. Please check back later.