Unauthorized Access Detected

Our security systems identified unauthorized access attempts targeting employee accounts between June 13, 2026 at 11:55 PM UTC and June 14, 2026 at 02:17 AM UTC. The threat has been partially contained — your immediate action is required.

What Happened

Phishing Campaign + Credential Compromise

A targeted phishing campaign harvested login credentials for approximately 34 accounts. Malware payloads were deployed on at least 6 endpoints.

What Has Been Contained

Affected sessions have been terminated. Suspicious IP ranges are blocked. Lateral movement has been stopped at the network perimeter.

Threat Status: Active Monitoring

The incident remains under active investigation. All employee passwords must be reset before end of business today.

Action Required — Do This Now

Step 1

Reset Your Password

Go to the employee portal and reset your password immediately. Do not reuse any previous password.

Step 2

Disconnect Affected Devices

If your device shows unusual behavior, disconnect from the network and contact IT immediately.

Reset My Password Now

Deadline: June 14, 2026 by 5:00 PM UTC — No exceptions

Contact the Security Team

Emergency Hotline

+1 (800) 555-0199

Secure Email

security@acmecorp.com

Slack Channel

#it-security-incident

This is an official communication from the Acme Corp Information Security Team. Do not forward this message. If you believe you received this in error, contact security@acmecorp.com immediately.

Acme Corp — 200 Innovation Drive, San Francisco, CA 94105

Security Incident Alert – Immediate Action Required