ACME HQDemo work items and pages, made up for Emargen's demo. Not a real company.
Support / SUP-1185

Northgate: Preston site manager locked out without typing anything wrong

Project
Support
Type
Support request
Status
Done Done
Priority
Medium
Organization
Northgate
Reporter
Daniel Okafor <daniel.okafor@northgate.example>
Assignee
Yusuf Demir <yusuf.demir@acme-hq.example>
Labels
northgatelockoutsecurity
Components
identity-service
Created
21 Sep 2026, 12:20 UTC
Updated
21 Sep 2026, 13:50 UTC
Resolved
21 Sep 2026, 13:50 UTC

Description

Our Preston site manager, Joanne Platt, got locked out this morning without typing anything wrong. What happened?

Linked issues

Comments (3)

Yusuf Demir · 21 Sep 2026, 12:50 UTCInternal note

Sign-in log: ten failed password attempts for Joanne's account at 04:12–04:14 UK time, from an address in a hosting range abroad. Mira?

Mira Holm · 21 Sep 2026, 13:30 UTC

Hi Daniel, the lock did what it should. Ten wrong passwords were tried for Joanne's account at 04:12 UK time, from an address abroad that isn't Northgate's, most likely someone with an email address leaked from another site. They didn't get in, and the account locked. Please ask Joanne to change the password to one that isn't used anywhere else.

Daniel Okafor · 21 Sep 2026, 13:50 UTC

Done, thanks. Good to see the lock doing its job.