Edith - We had a compromised user too. Looking in Google reports, I noticed
that user was presented with a login challenge several times before their
email account was used for an attack.

So I've told Google to alert me when a user is presented with a login


On Thu, Feb 9, 2017 at 9:50 AM, Edith Fogarty <[log in to unmask]> wrote:

> One of our teachers accounts seems to have been compromised this morning.
> We have been inundated by calls from other schools, area businesses, and
> now a business in Maine who received the message.  Short of changing her
> password, what else can we do?  I have temporarily suspended her account,
> but I am guessing that it is beyond us at this point.
> Edith Fogarty
> Technology Integration Facilitator
> Bradford Elementary School
> 143 Fairground Rd
> Bradford, VT 05033
> 802.222.4077 x281 <(802)%20222-4077>
> 802.222.5196 <(802)%20222-5196> fax
> *CONFIDENTIALITY NOTE:* The information transmitted, including
> attachments, is intended only for the person(s) or entity to which it is
> addressed and may contain confidential and/or privileged material. Any
> review, retransmission, dissemination or other use of, or taking of any
> action in reliance upon this information by persons or entities other than
> the intended recipient is prohibited. If you received this in error, please
> contact the sender and destroy any copies of this information.
> -----------------------------------------------------------------------
> Search <> the SCHOOL-IT Archive
> Manage <> your
> Subscription to SCHOOL-IT