Recognize the warning signs
You may see login alerts from places you do not recognize, password reset messages you did not request, unusual mailbox rules, or colleagues reporting messages you did not send. These clues need investigation; they do not always prove an account is compromised.
Take immediate steps
- Contact Softfusion through a known support channel and describe what you noticed and when.
- If you can still sign in, follow support's instructions for a password change using your normal company sign-in page.
- Deny unrequested MFA prompts and do not share one-time codes.
- Tell support if sensitive information, payment instructions, or client communications may be involved.
Let the team investigate
Security staff can review sign-in activity, sessions, forwarding rules, and affected applications. Avoid deleting suspicious messages before the team can examine them. CISA's small-business security guidance offers broader account protection advice.