Announcement

Collapse
No announcement yet.

URGENT: user created without our knowledge

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • URGENT: user created without our knowledge

    We had a new user appear in our click&pledge connect portal that we didn't add and I have no idea where they came from.
    Need to find out any details on this user as possible and find out if anything was stolen from the account. We have disabled the user and I've changed all of my users access to no longer have access to any settings (as there isn't a setting specifically for user creation/changes). Please reach out to me to discuss this issue.


  • #2
    Good day elizabetholiver


    Considering Click & Pledge does NOT use password there is extremely low probability for your user information to be stolen or accounts being compromised. We maintain a log of all activities and if we know what user has been created in your account we can easily determine who has done it.

    In your post you have not mentioned the UserID that has been created. Please let us know the first part of the ID (do not list complete ID for privacy). We will review this and let you know the details.

    We have reviewed your account 36207 and see no suspicious activities. Once we have the user information we will gladly review it.
    Regards,
    Click & Pledge Support Department

    On Salesforce? Help us by rating our app: Click & Pledge Donor Management on AppExchange

    Join us @ the educational webinars: https://clickandpledge.com/webinars/
    Live Support available Join between 3:00 - 3:30 p.m. ET Monday - Thursday: https://clickandpledge.com/webinars/
    Are you on Salesforce? Join us at the Power of Us Hub: https://powerofus.force.com/0F980000000CjpC

    Comment


    • #3
      User that was created was Flor.

      Comment


      • #4
        Good day elizabetholiver

        Thank you for your prompt reply.

        User: flord*****@****.com
        Created by: annema****@mut****.com
        Date/Time Created: 2020-09-29 15:38:24.847 ET
        IP: 69.243.127.227 >> https://talosintelligence.com/reputa...69.243.127.227

        Does this help?
        Regards,
        Click & Pledge Support Department

        On Salesforce? Help us by rating our app: Click & Pledge Donor Management on AppExchange

        Join us @ the educational webinars: https://clickandpledge.com/webinars/
        Live Support available Join between 3:00 - 3:30 p.m. ET Monday - Thursday: https://clickandpledge.com/webinars/
        Are you on Salesforce? Join us at the Power of Us Hub: https://powerofus.force.com/0F980000000CjpC

        Comment


        • #5
          It does. Is there any way someone could have gained access? the IP address is for a city in Maryland and we are based in California. While I understand IP addresses are not always exact, that seems a little outrageous to expect that a user in CA would ping an IP address across the country. I also have checked with the user listed as who created it and they stated they did not create any user in the system.

          Does the system provide any other information on what if anything that user did in the system?

          Comment


          • #6
            Good day!

            Please note that the IP OWNER is not the IP that the person was located. Comcast is the provider and their IP may be registered in Maryland. It does not necessarily mean the user was in Maryland.

            As for the user - the ONLY way that user could possibly have been created is for the annema*** to have created the user. No passwords are created in the system.. the user has to click and receive the one time code to login. I am sure you know all this already..

            Also note that this user was created on September 29, 2020 at noon Pacific Time.

            As for what this user has done - we have queried the campaigns and forms and see no activity by that user. That user has never logged in and has no activity in the system.

            Hope that helps. Let us know if we can be of more help.
            Regards,
            Click & Pledge Support Department

            On Salesforce? Help us by rating our app: Click & Pledge Donor Management on AppExchange

            Join us @ the educational webinars: https://clickandpledge.com/webinars/
            Live Support available Join between 3:00 - 3:30 p.m. ET Monday - Thursday: https://clickandpledge.com/webinars/
            Are you on Salesforce? Join us at the Power of Us Hub: https://powerofus.force.com/0F980000000CjpC

            Comment


            • #7
              Great thank you for the information. Hopefully now that we have limited access in the system and deactivated the user, this won't be an issue going forward, but knowing that the person never logged in or had no activity is peace of mind.

              Comment

              Working...
              X