On October 12th a malicious group signed up for a RepairShopr account and used it to send emails containing phishing links out to thousands of email lists. Our team caught the account and canceled their usage on the same day, however they had already sent out a batch of emails. Our third party provider contacted us and suspended our emails. We were unable to get in contact with the third party to ensure we had made the necessary changes and after escalation were able to get full restoration of our account on October 16th. A similar situation occurred Monday October 21 but with the escalation process we were able to get this solved within the same day.
Due to the way our emails are configured to send, both notifications from RepairShopr and accounts that do not have SMTP or a verified email domain setup are sent from the same third party account. Because of these incidents we are moving the RepairShopr notifications to a separate platform to ensure that there is no lapse if a single account misuses the RepairShopr email platform. We are also putting in place more rigorous signup flows to limit accounts that are not legitimate IT Professionals for signing up with RepairShopr. We strongly recommend that all accounts set up SMTP or verify your email domain so that you are not impacted should this occur again. We appreciate your continued support and understanding as we work to address these challenges and improve our email deliverability.