Support / SUP-1145

Northgate: list of our people whose emails were tried

Project: Support
Type: Question
Status: Done Done
Priority: Medium
Organization: Northgate
Reporter: Rachel Owusu <rachel.owusu@northgate.example>
Assignee: Mira Holm <mira.holm@acme-hq.example>
Labels: northgatesecurityaudit
Components: identity-service
Created: 3 Sep 2026, 08:55 UTC
Updated: 3 Sep 2026, 10:40 UTC
Resolved: 3 Sep 2026, 10:40 UTC

Description

Daniel told me about last night. For our records, can we have the list of our people whose emails were tried?

Rachel

Linked issues

relates to OPS-41 Credential stuffing against password sign-in in the EU: about 1.9 million attempts Done
relates to SUP-1139 Northgate: Warrington night shift couldn't sign in for 20 minutes Done

Comments (2)

Mira Holm · 3 Sep 2026, 10:15 UTC

Hi Rachel, yes, attached: the 31 Northgate people whose email appeared in the attempts. None of the attempts signed in. We share the names, not the passwords that were tried or the addresses they came from. If any of the 31 use their Northgate password anywhere else, it's worth changing.

Rachel Owusu · 3 Sep 2026, 10:40 UTC

Thanks, that's what I need.