Sign up for Office 365
Learn more about Office 365
One of my colleagues sent out a new meeting invitation to our staff 2 weeks ago (and we received it). 2 days ago, we all received the same meeting invitation but this time, it shows as being sent from a different colleague, the message was cut off, and the colleague did not send it. Could you assist me on what to check to see if the 2nd collegue's email was hacked? any help would be greatly appreciated.
Thanks for the feedback.
To troubleshoot the issue, you can do the following step:
Please run the Delivery reports and check if there is any other emails have been sent which the user B didn’t send.
For more information about Delivery reports, you can refer to the following link
To further troubleshooting, please post the two mail headers to us.
Thank you for the suggestion on the Delivery Reports. I will check that once I get the chance to.
are you referring to the Internet Headers? If so, here are the ones from the 2 emails....
From the original one:
Received: from SN2PRD0510HT003.namprd05.prod.outlook.com (10.255.116.38) by
CH1PRD0511HT003.namprd05.prod.outlook.com (10.255.159.38) with Microsoft SMTP
Server (TLS) id 188.8.131.52; Thu, 18 Oct 2012 22:43:52 +0000
Received: from SN2PRD0510MB396.namprd05.prod.outlook.com ([169.254.8.12]) by
SN2PRD0510HT003.namprd05.prod.outlook.com ([10.255.116.38]) with mapi id
14.16.0224.004; Thu, 18 Oct 2012 22:43:51 +0000
Content-Type: application/ms-tnef; name="winmail.dat"
From: Stephanie D'Arcy <firstname.lastname@example.org>
To: Staff <email@example.com>
Subject: Discovery Community Volunteer Event - Food Bank of Northern Nevada
Thread-Topic: Discovery Community Volunteer Event - Food Bank of Northern
Date: Thu, 18 Oct 2012 22:43:50 +0000
X-MS-Exchange-Organization-AVStamp-Mailbox: MSFTFF;1;0;0 0 0
X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply
From the 2nd one (this is the one that was "NOT" sent:
Received: from BL2PRD0510MB361.namprd05.prod.outlook.com ([169.254.2.225]) by
BL2PRD0510HT004.namprd05.prod.outlook.com ([10.255.100.39]) with mapi id
14.16.0233.002; Mon, 5 Nov 2012 03:29:43 +0000
From: Nicole Barde <firstname.lastname@example.org>
Date: Mon, 5 Nov 2012 03:29:42 +0000
I have checked your two email headers, it shows the emails was sent by his own account.
So I want to suggest something.
I would like to follow up with the question you posted previously. How are things going?
Thanks for checking Jason. Currently we have given up on the situation and assume that it was just a glitch at that one moment. We will get back to the issue if it happens again.
If you have any other questions when using Office 365, please feel free to post in the forum. We are more than happy to be of assistance.