possible compromised account, unable to log in

[matt-askdlfjhas]

Setup a new phone system for my church on Wednesday. Got everything pretty much working. Went to log in today with my extension that is the admin and says my password is incorrect. Attempted to reset password with link but email shows up. Attempted password reset with other extensions and no emails arrive either for those users. Logged into M365 and verified emails are not being received. I need to get access back into the console to determine if a breach occurred. I am the only one that has logged into the 3cx console so far as its not in production yet. What do i do? I still can log into the main customer portal.

 

[matt-askdlfjhas]

Rebooted the 3cx instance and now my phone is not registrated. It was working minutes before i rebooted. I went ahead and turned off the instance to be safe. Let me know what next steps should be.

 

[SteveITS]

Did you enable M365 sync by chance? There was a recent thread about that having an option to use it for mail.

Email addresses must be used by only one extension for reset to work.

 

[matt-askdlfjhas]

No, I did not setup M365 sync.

If I open a support ticket, do you think they can reset the password for me? Or at very least provide me with the back up file I performed on Wed?

 

[SteveITS]

It seems trial licenses don’t have 3CX SMTP: https://www.3cx.com/community/threads/new-trial-cant-reset-password.137773/post-662196.

Is your server using 3CX hosting? If not they definitely don’t have your backup file and I don’t know if they’d have access if you were using their hosting.

 

[matt-askdlfjhas]

Ahh! That was one of my final steps yet to complete: purchase the 3 year license. I thought id get it up and running first during the trial period before buying the license.
Yes this is hosted in 3CX.

 

[SteveITS]

You can try asking at 3CX.com/contact.

If it is new and small it might be easier and/or quicker to start over.

I suggest downloading backups or configuring external storage.

We can help with the license but not so much the access.

 

[matt-askdlfjhas]

Appreciate it Steve. Yep, just gonna start over. MFA and email integration is going to be setup as a priority first. Thanks for your help.

 

[KyriacosS_3CX]

Cheers @SteveITS for jumping in on our behalf .

@matt-askdlfjhas , if the setup was not complex, redoing it with the new info in mind will probably save you from headaches down the line. Feel free to check in if anything else is needed.