Has our email been hacked?

Has our email been hacked?

If you've had an email through that is trying to get you to respond or help someone with buying something, you've not been hacked.  This is known as Phishing.

Every email address is like a postal address. Once someone knows your email address, they can send you a message from anywhere in the world, as the councils email addresses are available on the website they can be scraped by criminals to use in phishing scams. 

Whilst your email system blocks the vast majority of these messages before you ever see them, no spam filter is perfect, so occasionally one gets through to your inbox. Protecting your mailbox from these emails means that it's likely that the emails you do want to receive will not get delivered so it's a fine balance. Think of it as keeping you house door locked, but being able to open it when you want to let someone through; if you board it up, no one can get in.

Receiving a phishing email actually shows that your email system is working:
  1. Most malicious emails were blocked automatically.
  2. The suspicious one was delivered because it looked convincing enough to evade the filters.
  3. You recognised it as suspicious and did not interact with it.

These the the signs that you have been hacked:

  1. Emails being sent from your account that you didn't send.
  2. Your password no longer working.
  3. Unexpected login notifications from unfamiliar locations or devices.
  4. New inbox rules or email forwarding that you didn't create.
  5. Missing or deleted emails.
  6. Unauthorised changes to your account settings.
  7. Colleagues receiving strange emails that genuinely came from your account.
If none of these things have happened, then simply receiving phishing emails does not suggest that your organisation has been hacked.

    • Related Articles

    • How to stay safe from phishing emails

      Advice for Councillors using a council.gov.uk email address Every councillor receives unwanted emails from time to time. These are often called phishing emails. Think of it like receiving junk mail through your letterbox. Someone has sent you an ...

    • Setting up Display Name Spoofing to avoid phishing scams

      In this video we cover how to set Display Name Spoofing protection for your email account. Guidance The most important piece of advice to avoid phishing scams or people pretending to be one of your staff or councillors is education. In your next ...

    • Email Deletion & Recovery in Zoho Mail

      Overview Email deletion is a standard and necessary function within Zoho Mail, allowing users to manage inbox clutter, remove outdated information, and maintain an organised mailbox. However, it’s important to understand how deletion works and what ...

    • Why are my incoming emails being blocked?

      Your email system may be rejecting messages because of email security checks designed to prevent spam, spoofing, and phishing attacks. SPF is a security check used by email systems. It checks whether an email really came from the address it says it ...

    • Print out an email

      Overview To print a mail from the Zoho Mail, this is different on the desktop app and the mobile app. Take a look at the relevant section below. Method - Zoho Desktop App 1. Open the email. Go to the drop down arrow on the right hand side of the amil ...