Received email about unknown password change

  • SonnyKing
    Asked on June 24, 2017 at 11:38 AM
    JotForm <noreply@jotform.com>
    3:24 PM (20 hours ago)
    Received email about unknown password change Image 1 Screenshot 50
    		 
    Received email about unknown password change Image 1 Screenshot 50
    Received email about unknown password change Image 1 Screenshot 50
    to rollo04
    Received email about unknown password change Image 1 Screenshot 50
     
     
     
     
     
    Hi,

    Your password was reset using the email address reply@abouthyper.net on Thursday June 22, 2017 at 05:50am.


    Operating system: Windows
    Browser: Chrome
    IP address:  74.204.10.15
    Estimated location:  Brandenburgische Str 14, 55278 Hahnheim Germany



    If you did this, you can safely disregard this email.
    If you didn't do this, please contact us by replying to this email for more informations


    Don't recognize this activity?
    A malicious user might have your password. Please Contact us. we'll review your recent activity and help you take corrective action.





    Why are we sending this? We take security very seriously and we want to keep you in the loop on important actions in your account.
    We were unable to determine whether you have used this browser or device with your account before. This can happen when you sign in for the first time on a new computer, phone or browser, when you use your browser's incognito or private browsing mode or clear your cookies, or when somebody else is accessing your account.


    Thanks,
    Security Team
  • Sven
    Replied on June 24, 2017 at 11:44 AM

    Sorry for the inconvenience. A user who uses JotForm has been sending spam messages to some emails. This is a phishing attempt. we have already taken action by suspending the user's account.

    Please ignore the email and let us know if you continue receiving emails like this. Also, please don't click any links from the email message.

    Thank you for your understanding. 

  • Felicia Hasse
    Replied on June 24, 2017 at 12:12 PM

    I received that email and clicked a link. Do I need to change passwords on my accounts? 

  • Mike_G JotForm Support
    Replied on June 24, 2017 at 2:07 PM

    @Felicia Hasse

    I would suggest that if you happen to provide any information such as your username and/or password after clicking the link, just to be safe, please update your password for your Jotform account.

  • Amy
    Replied on June 25, 2017 at 2:28 PM

    I have received the same email and do not have an account with JotForm.  I have never heard of JotForm.

  • Mike
    Replied on June 25, 2017 at 2:58 PM

    @Amy,

    It is safe to ignore the email. Nothing has been compromised.

    The spammer has been already blocked, and we keep monitoring the situation to make sure that the issue is completely solved.

  • Curtis Lee Tessmer
    Replied on June 25, 2017 at 8:10 PM

    This is such a horrible preventable incident that I might take legal action. Send me money immediately to 2341 carling drive apt#4 madison wisconsin 53703. 
  • Cat
    Replied on June 26, 2017 at 10:39 PM

    I've received this message as well and I also do not have an account from JobForm to my google mail account.


    What's alarming in the subject of the email that I received, it had my first legal name on it "Is_This_You_ (Legal First Name). I've checked on my gmail account to ensure I haven't actually put my full name in the "personal info" section in case someone managed to hack into it. As I thought, I only put in my nickname and last name, not my actual full legal name.

    I'd appreciate it if I didn't receive a similar "just ignore the message," reply. This is raising much concern if this "spammer" got a hold of my first legal name without having to see it on my gmail account.

  • Jeanette JotForm Support
    Replied on June 26, 2017 at 10:56 PM

    @desakudacat@gmail.com

    Please disregard the emails, they are not coming from us at all, but like you discovered, they are being sent from Germany and are impersonating us. So if you did not click or filled anything out, there should not be anything compromised for which you should be concerned.