The BCIT Cyber Security Office has identified a number of inactive my.bcit.ca accounts belonging to former employees as vulnerable to misuse, including being exploited to send spam or phishing emails. These compromised accounts pose a risk to the reputation of BCIT’s email system and the Institute overall.
To help protect BCIT systems, effective November 19, 2025, any employee who had their last working day 18 months ago or longer will be classified as Inactive. Their myBCIT account will also be marked Inactive and scheduled for deletion by the end of January 2026. Once this happens, access to all BCIT online services requiring a myBCIT login — including my.bcit.ca email and the myBCIT portal — will end.
This change helps protect BCIT from compromised accounts while keeping user accounts active, ensuring that registration and self-service functions remain unaffected.
What this means for you:
- Active Employees: If you’re currently working at BCIT, your account will not be affected.
- Former Employees: If your last working day was within the last 18 months, your account stays active. You will still be able to access self-service functions.
- Inactive Employees: If your last working day was 18 months ago or longer, your employee status will be classified as Inactive starting November 19, 2025. Your myBCIT account will also be marked Inactive and scheduled for deletion by the end of January 2026. You will lose access to all BCIT online resources that require a myBCIT login – including your my.bcit.ca email and the myBCIT portal.
Frequently Asked Questions
BCIT is implementing this change as part of a broader effort to strengthen its security and protect against cyber threats.
Be Cyber Aware
Visit our website at www.bcit.ca/cyber-aware/ to discover more about responsibility and end-user security awareness.
