Why this matters
Quickly preserving evidence and limiting access is more useful than making unrelated destructive changes.
Step by step
- Record unexpected logins, messages or account modifications with times and safe screenshots.
- Contact support through a verified channel and use supported credential and session controls; involve your organisation’s incident owner.
- Confirm the authorised owner’s access and document which suspicious changes require investigation.
Keep the result of the final check and any unresolved question with your project records.
Availability depends on the product, permissions and management agreement. Use the existing support conversation for the same issue.
