# country: US
# kind: email-thread

From: [[PERSON_NAME|Marisol de la Cruz]] <[[EMAIL|marisol.delacruz@harborviewtech.example]]>
To: IT Security <security@harborviewtech.example>
Cc: [[PERSON_NAME|Hyun-Woo Kim]] <[[EMAIL|hyunwoo.kim@harborviewtech.example]]>
Date: [[DATE|September 22, 2026]] 9:14 AM
Subject: Odd login alert on my account

Hi team,

Hope you're doing well. I got a push notification last night for a sign-in attempt I didn't make. The alert listed the IP address as [[IP|198.51.100.42]] and a device I don't recognize. Can you check the logs for ticket [[REFERENCE|SEC-88213]]?

I'm heading to the Dallas office next week for the vendor review, so I'd like this resolved before I travel. My cell is [[PHONE|(415) 555-0163]] if it's easier to call.

Thanks,
Marisol

---

From: IT Security <security@harborviewtech.example>
To: [[PERSON_NAME|Marisol de la Cruz]] <[[EMAIL|marisol.delacruz@harborviewtech.example]]>
Cc: [[PERSON_NAME|Hyun-Woo Kim]] <[[EMAIL|hyunwoo.kim@harborviewtech.example]]>
Date: [[DATE|September 22, 2026]] 11:02 AM
Subject: RE: Odd login alert on my account

Marisol,

Thanks for flagging this quickly. We traced the attempt to a credential-stuffing sweep, not a targeted attack, but we're resetting your password as a precaution. Your temporary password is [[SECRET|Tq9!vLm2xR]] — please change it at first login.

I've also uploaded the full log export here, access limited to our team: [[URL_PRIVATE|https://intranet.harborviewtech.example/security/cases/SEC-88213/logs]]

We can't just hand out admin access to every Tom, Dick, and Harry in the building, so going forward, please use the VPN client (Model HV-Connect 4) rather than the browser portal when traveling.

Best,
[[PERSON_NAME|Hyun-Woo Kim]]
IT Security

---

From: [[PERSON_NAME|Marisol de la Cruz]] <[[EMAIL|marisol.delacruz@harborviewtech.example]]>
To: IT Security <security@harborviewtech.example>
Date: [[DATE|September 22, 2026]] 11:40 AM
Subject: RE: RE: Odd login alert on my account

Got it, thank you both. Password changed. I'll use the VPN client for the Dallas trip.

Marisol
