By Joanne Bailey-Boorsma
joanne@wktv.org

There are no bells or whistles or even alarms; just a simple text message to your phone as you walk into the store: “CAUTION: The Unknown network you are connected to is not encrypted. Please avoid any private or confidential transactions unless using secure Websites…”

The message comes from a free app, called Michigan Secure, which is designed to help Michigan residents navigate an increasingly technology-based world.

“Much of the activity that people do is online,” said the state’s Director of Communications Caleb Buhs. “Students taking classes to people making purchases.”

With the growing use of technology comes a high risk of people’s personal information getting stolen through threats, such as unsecured internet access, that most people don’t even realize are out there.

“It is designed to make people aware,” Buhs said. “If you are at the gym and suddenly decide to make a purchase for new equipment or clothing, the alert will come up that the internet is not secure. Maybe that is not the time to make that purchase.”

Developed by the Michigan’s Department of Technology, Management and Budget, the department in charge of keeping highly sensitive public information protected, the project was started two years ago because of the increase in cybersecurity crimes against both individuals and companies.

 

Many are familiar with the SolarWinds data breach, one of the largest data hacks in U.S. history, that resulted in more than 18,000 computer networks being sabotaged. There are also the everyday reminders of not to open emails from the IRS or Social Security as neither would contact people in such a way. According to Pew Research, more than 60 percent of Ameicans have personally experienced a major data breach. The cost of the average data breach to a U.S. company is around $8 million.

Buhs said with the recent pandemic, which forced many into remote work and classrooms, the risk of cyber attacks become even higher. In fact, because of the growing use of technology by municipalities and schools, institutions are facing more malicious cyber attacks. Just this March, a cyber attack on Microsoft focused on vulnerabilities in its exchange service, email software, and calendar resulting in 30,000 organizations getting hacked. More recently, college students across the nation are being warned about a phishing attack to steal students personal information to file false tax claims.

The Michigan Secure app is designed to detect phishing risks by checking links. It also will alert a user to an unsecured Wi-Fi network, check apps before they are downloaded, and when a system has been tampered with. Michigan Secure even has a database of potential threat indicators to notify individuals of activity on their phone that matches a documented threat. Everything is designed for the user to determine what they want and do not want to use.

The Michigan Secure app is a free download from App Store or Google Play. The app runs on devices with iOS 11 or higher, Android 6.0 or higher and Chromebooks with Android App Support. 

“While the security of our mobile devices is critical, it is also important to respect people’s privacy,” DTMB Director and State Chief Information Officer Brom Stibitz said. “Michigan Secure does not require anyone to share their personal information or mobile data. It exists for the sole purpose of detecting threats and notifying the user.”

The Michigan Secure app does not collect, store, or monitor the personal information of users that download it. The app’s code and privacy configuration settings have received the approval of the American Civil Liberties Union for the way it protects individual privacy.

Within only a few days of release, which was earlier this year, the app had more than 1,000 downloads and interest continues to build. Buhs said he believes Michigan is the first state to offer such an app with only the City of New York having something similar. 

For more information about the app, visit Michigan.gov/MichiganSecureApp. Visit the Michigan Cybersecurity website at Michigan.gov/Cybersecurity for information ranging from how to practice proper cyber “hygiene” to learning about what to do if you are a victim of a cybercrime.