Email from the AA - 'Password changed correctly' - AA hacked?

Silver_Shark

AdrianC wrote: »

The AA have their mail servers listed in the SPF - Sender Policy Framework. This server isn't one of them. It's easy to get a mail server to lie about who it is.

I bet any links in the email aren't really to theaa.com

No link in the email so has to be a trap to get you to log in and reveal your password.

jon720

Just spoke to AA
They were not aware of it until start of business today (i was one of quite a few who got through early!)
I was told at this stage it was highly likely to have come from one of themselves directly.
No further information was forthcoming.

filmderams

AdrianC wrote: »

The AA have their mail servers listed in the SPF - Sender Policy Framework. This server isn't one of them. It's easy to get a mail server to lie about who it is.

I bet any links in the email aren't really to theaa.com

The slightly bizarre thing is that there aren't any links the email its completely plain text with the reference to an 0330 phone number. That makes it more likely that it was a botched code upgrade by the IT dept but would be still work as a phishing attack if the server was compromised and the login script altered to send any inputted user/pass combos to a third party. Its unlikely but a possibility.

I've reached out to the AA on social media but have yet to receive a reply.

The_AA_Company_Representative

I am posting on here as the official representative of the AA.

We are aware of an email being sent to members regarding a change of password on their accounts.

We advise customers not to ring the number provided within the email.

We are looking into this matter urgently and will provide further information as soon as it becomes available.

Regards,
The AA Social Media Team.

vbt

I've had this email too this morning (06:19). I rang The AA on the number on their website, rather than the one in the email just to be on the safe side (0344 209 0556).

Was on hold for ages as they said they're experiencing high call volumes. The person I just spoke to said it was sent out by their IT department in error and that they're trying to get to the bottom of it at the moment. She advised to disregard it totally.

greenbee

Glad I found this thread - I found the email in my junk and when I tried calling I found they were experiencing high call volumes. Wonder why

Jemima09

I've had the email too this morning, I tried calling the number but got a message saying the offices were closed! Can't log in to my aa account though...

Zeni

I had this email this morning.. very odd as at first glance nothing looks out of ordinary about it.

Doc_N

The_AA_Company_Representative wrote: »

I am posting on here as the official representative of the AA.

We are aware of an email being sent to members regarding a change of password on their accounts.

We advise customers not to ring the number provided within the email.

We are looking into this matter urgently and will provide further information as soon as it becomes available.

Regards,
The AA Social Media Team.

Interesting. I advised your people last night and they were supposed to be dealing with it then. They said it was a fake email and they'd had a lot of calls about it.

You ought to be aware though that it's a perfectly genuine AA number.

Silver_Shark

I've cancelled my direct debit to them, not due out until December but I don't know what else to do.