What a customer contact sees: plain language, their own organisation only, under your brand or a partner's.
Phone them on a number you already have. Do not reply to the email thread.
At 2:11 pm the intruder replied on Dana's email thread with Harborline and asked for new bank details to be used. Harborline's own mailbox was broken into as well, so an email from either side proves nothing. A phone call does.
She will be signed out everywhere and will set up her authenticator again. About 10 minutes of her time.
Dana typed her password into the fake sign-in page, so the intruder has it. Resets for finance staff wait for you, which is why we have not done it already.
Every sign-in, email action and network connection from your people and their devices, checked as it happens.
A person looked at each one. 116 were harmless and 2 needed a small fix. more from today are open, all part of this incident.
Today's. An incident is something real that needs action, not only a warning. October had three, all contained.
From the first alert to the action that stopped it, across October's three incidents. Our target is 15 minutes. Today's incident is still open and will be over it.
| Source | What it tells us | Status |
|---|