Dear Support Team,

We would like to report suspected unauthorized activity involving the email account business@stem-xpert.com.

On the morning of October 5, 2026, we noticed that a bulk email containing inappropriate content appears to have been sent from this account. We would like to verify whether the account has been compromised or whether any unauthorized access or activity has occurred.

Kindly investigate the following:

1. Review the account login and activity logs for October 5, 2026.

2. Check for any suspicious or unauthorized login attempts, including logins from unfamiliar locations, devices, or IP addresses.

3. Verify whether the bulk email was sent directly from the account or through a connected application or service (SMTP, API, or third-party app).

4. Check for any unfamiliar forwarding rules, filters, delegates, or authorized applications.

5. Confirm whether the account or its credentials have been compromised.

6. Advise us on any additional security measures we should take.

Enabling Two-Factor Authentication (2FA)

As an immediate security measure, we would like to enable Two-Factor Authentication (2FA) for business@stem-xpert.com. Please guide us through the correct procedure for enabling 2FA and advise whether 2FA can be enforced for all users across our organization.

Removing or Resetting 2FA During Login

Please also guide us on how to remove, disable, or reset 2FA if we are unable to complete the verification step while trying to log in (for example, if the authenticator device or registered phone number is lost, changed, or unavailable). Specifically, we would like to know:

- Whether an administrator can temporarily disable or reset 2FA for a user account.

- How to generate and use backup/recovery codes.

- The recovery procedure and verification required if access is completely lost.

Immediate Actions

Please let us know whether you recommend changing the account password, signing out all active sessions, revoking app passwords and connected app access, or taking any other immediate action before enabling 2FA.

Kindly treat this as a high-priority security issue and assist us at the earliest.

Regards,

Ayisha Rana

IT Support

STEM-Xpert