Support / SUP-1141
Brakeline: anything to do after last night?
Description
Saw your status page about last night. Anything we need to do? We're on Entra ID.
Linked issues
- relates to OPS-41 Credential stuffing against password sign-in in the EU: about 1.9 million attempts Done
Comments (3)
Mira Holm · 3 Sep 2026, 10:20 UTC
Hi Priya, six Brakeline emails were in the attackers' lists, all office accounts with passwords (list attached). None of the attempts signed in. I'd change those six passwords, or move those people to single sign-on.
Priya Nair · 3 Sep 2026, 10:45 UTC
Changed. We'll move them to Entra ID this month.
Hi Priya, your depots sign in through Entra ID, and the attack only used the password form, so most of Brakeline wasn't reachable. A few Brakeline accounts still have ACME passwords (your two fallback administrators and some office staff). Mira will confirm what we saw for those by noon.