Email Account Takeover False Positive Case Creation
Incident Report for Abnormal Security
Resolved
On April 5, at 11:30  AM UTC, customers with Account Takeover Protection may have seen 1-2 High Confidence False Positives due to an errant detector which over-weighted the Microsoft Risk Event. The cases created could have remediated the impacted user when Auto-Remediation for High Cases is enabled. The issue has been identified and corrected.

Affected Services: Email Account Takeover

Severity Level: Major

Incident Start Time: April 5, at 11:30 AM UTC

What We're Doing: The issue has been identified and corrected.

Recovery:
For customers who received more than 3 email notifications for these cases, those cases have been removed from the Portal. Customer's who only received 1 notification the cases remain visible and can be resolved as not an attack.

Resolution Time: April 5, 9:48 PM UTC

Next Update: Resolved

Questions? For any immediate concerns, don't hesitate to contact us at support@abnormalsecurity.com.
Posted Apr 05, 2024 - 15:03 PDT
This incident affected: Account Takeover Service.
← Current Status Powered by Atlassian Statuspage