Act quickly:

1. Change your password immediately from a device you trust.
2. Sign out of all sessions if the option is available.
3. Open a high-priority ticket under Account / Access describing what you noticed.

Do not delete suspicious emails — they may help our investigation.

• Use at least 12–16 characters.
• Mix upper and lower case, numbers, and symbols, or use a long passphrase.
• Never reuse passwords across accounts.
• Use a password manager to generate and store them.

Enable two-factor authentication wherever possible for extra protection.