Containing a Microsoft 365 compromise for a care provider
An unusual mailbox reply exposed a security incident involving sensitive operational information.
The account was contained, protection tightened and day-to-day care operations continued without disruption.
