Phishing email got through to 3 users — need confirmation blocked

TKT-0010 High Resolved Alert Query

Created By: m.taylor
Created: 2026-06-28 16:17
Last Updated: 2026-06-30 14:57

Assigned Analyst: Anika Patel
Category: Alert Query
Messages: 9

Conversation

m.taylor Customer

2026-06-28 16:17

We received an alert notification and would like some clarification on its severity and whether any action is required from our side.

Regarding: Phishing email got through to 3 users — need confirmation blocked

Could you review and let us know if this is something we should be worried about?

Anika Patel SOC Analyst

2026-06-28 19:17

We've applied the policy change you requested. It will take effect within 15 minutes across all monitored endpoints. Please let us know if you see any issues.

m.taylor Customer

2026-06-28 21:51

The affected user has confirmed they changed their password. Can you verify MFA is active?

Anika Patel SOC Analyst

2026-06-29 01:11

Thank you for raising this. I've reviewed the alert and can confirm we're investigating. I'll update you within the hour.

m.taylor Customer

2026-06-29 04:36

That's reassuring. Can we schedule a call to discuss the remediation steps?

Anika Patel SOC Analyst

2026-06-29 05:36

I've checked with our threat intelligence team. The dark web finding is from a third-party breach, not a direct compromise. We recommend enforcing a password reset for the affected account.

m.taylor Customer

2026-06-29 06:22

Thanks. Could you also check if any other accounts were affected?

Anika Patel SOC Analyst

2026-06-29 09:15

Thank you for raising this. I've reviewed the alert and can confirm we're investigating. I'll update you within the hour.

m.taylor Customer

2026-06-29 12:06

The affected user has confirmed they changed their password. Can you verify MFA is active?

Ticket Resolved

This ticket has been resolved. If you need to reopen it or have further questions, you can create a new ticket.