On September 23, 2024 a malicious group signed up for a Syncro account and used it to send emails containing phishing links out to thousands of email lists. Syncro caught the account and canceled their usage on the same day, however they had already sent out a batch of emails. Our third party provider contacted us and suspended our emails on October 4th. We were able to work with the third party to restore full email functionality on October 6th. On October 12th a similar situation occurred but we were unable to get in contact with the third party to ensure we had made the necessary changes and after escalation were able to get full restoration of our account on October 16th.
Due to the way our emails are configured to send, both notifications from Syncro and accounts that do not have SMTP or a verified email domain setup are sent from the same third party account. Because of these incidents we are moving the Syncro notifications to a separate platform to ensure that there is no lapse if a single account misuses the Syncro email platform. We are also putting in place more rigorous signup flows to limit accounts that are not legitimate IT Professionals for signing up with Syncro. We strongly recommend that all accounts set up SMTP or verify your email domain so that you are not impacted should this occur again. We appreciate your continued support and understanding as we work to address these challenges and improve our email deliverability.