E-mail Access by Web - Main Account Locked After Upgrade ???, or Hacking ???

[shadders]

Hi,

Just logged into e-mail - and the main account was locked and i had to unlock the account before proceeding. E-mails were still received - so the e-mail locking did not reject incoming e-mails.

The login seemed to be upgraded - so was this the issue ?

If hacking attempts were the cause - how do we (the customer) know ?.

BT, when their email was run by Yahoo, provided a screen for you to see which IP address your e-mail had been logged into from. Does BT have this system in place or does BT plan to provide this in the future - so we can see if our e-mail accounts have been hacked, or other.

Given the plethora of routes that people can access the web-mail - then such as system of being able to view the log of when an account was logged into and from where (IP address), will allow for BT customer to vet their own accounts and flag up any security issues.

Thanks ands regards,

Shadders.

[shadders]

Hi,

These keeps on occuring - i login using :

https://signin1.bt.com/login/emailloginform

When i login, the main e-mail account is locked. Happens every other day.

This never used to happen, and only happens since the login pages have been upgraded last weekend ??

Shoud you logout every time once you have viewed the webmail ?

The webmail drops when i am online for an 30 minutes or so, and always has done this. Is this a lost connection issue locking the account ?

Has BT implemented some new security feature that has not been publicised ?

If BT has implemented a new security feature - when will it inform its customers about it ?

Is the locking of the e-mail due to hacking attempt ?.

Will BT be informing the customer that they are dealing with the issue, such as informing the Police that a specific IP address is attempting to hack an account ?

Regards,

Shadders.

[Luke45]

Hi
You wrote " i login using :
https://signin1.bt.com/login/emailloginform
When i login, the main e-mail account is locked. Happens every other day. "
How do you unlock again ?
I am having problems with my e mail and BT ID passwords. If i change one i need to change the other one to the same , Otherwise i cant access to one of them !! Maybe you use samae passwords for both , but in my opinion that is very unsafe as someone hack your e mail then all your BT ID profile is also in danger which includes financial details of your account .

[shadders]

Hi,
I am not changing the e-mail password, as when i login using the previously posted URL, i am taken to the management page for the e-mails. It it here that the account i am trying to log into is locked.

It just happened again, today 18th February 2019, when i last logged in yesterday 17th February 2019.

I need BT to respond to state either the account is being brute force hacked, or not.

No information from BT has no benefit, and is a hindrance. I just do not know if it is the upgraded system causing the issue, or hacking. Do i raise a fault, or are BT dealing ? No other responses from other people, so it seems to be my e-mail, which suggests hacking - but only BT can confirm this.

Regards,
Shadders.

[shadders]

Hi,

I logged out yesterday from the webmail, and this morning the main account was locked.

Therefore, since no one else is reporting this, it seems to be specific to my account.

As a poster has stated above, if the account is hacked, it means that the people can see financial information relating to myself.

Do i raise a fault or other to ensure BT reacts to the locking of my account ?.

Do i need to report BT to CERT (https://www.ncsc.gov.uk/reporting-cyber-security-incident) ?

Regards,

Shadders.

[gg30340]

Which email system are you on? Is it BTYahoo or BTMail. If you are not sure you need to log on to your email account and check the BT logo. If it shows Yahoo you are on the BTYahoo system.

If your email account is "locked" how do you get back into it?

How do you access your email account is it via email apps/clients or exclusively via webmail?

Is it accessed only on one device or multiple devices?

If your account is being locked because of a "brute force" attempted hack it would appear that BT's security system is doing the job it is supposed to do. ie lock the account to prevent access.

Have you carried checks to see ensure that if your account was hacked that nothing with in the account has been changed which will assist any potential hacker from regaining access.

See link and the sub links.

https://bt.custhelp.com/app/answers/detail/a_id/46823/~/recovery-of-bt-mail-compromised-email-accoun...

[shadders]

Hi,

I am on the BTMail system.

As above, when i login to webmail, i am transferred to the BT management system, which shows my e-mail accounts status, and the main e-mail is locked.

I login to webmail to delete spam, then use a client to download - POP.

The account should only be ever accessed by the IP address BT assigns to my account. I use no other access route.

All aspects of MyBT are correct - nothing has changed.

If it is a brute force hack - then i would expect BT to notify myself of the situation and that they are dealing.

BT in its wisdom has used the main e-mail address password as the BT account password - which is a serious security risk.

Regards,

Shadders.

[gg30340]

What do you mean when you login to webmail you are transferred to the "BT management system, which shows my e-mail accounts status, and the main e-mail is locked"?

Where is the BT Managment system that you are refering to, is it in your MyBT and what is being shown to suggest that your account is locked, and if it is locked how did you unlock it or have you not unlocked it and if not why not?

As regards "The account should only be ever accessed by the IP address BT assigns to my account". BT don't assign an IP address to an account, it is assigned to the device that is connecting to the network. See link about IP addresses

https://en.wikipedia.org/wiki/IP_address

If it is a suspected "brute force" attack BT are notifing you by locking yor account.

[Sable]

---

@shadderswrote:
Hi,
I am not changing the e-mail password, as when i login using the previously posted URL, i am taken to the management page for the e-mails. It it here that the account i am trying to log into is locked.

It just happened again, today 18th February 2019, when i last logged in yesterday 17th February 2019.

I need BT to respond to state either the account is being brute force hacked, or not.

No information from BT has no benefit, and is a hindrance. I just do not know if it is the upgraded system causing the issue, or hacking. Do i raise a fault, or are BT dealing ? No other responses from other people, so it seems to be my e-mail, which suggests hacking - but only BT can confirm this.

Regards,
Shadders.

---

[Sable]

I have just the same problem and made a thread about it a little while ago.  Absolutely ridiculous.  Nothing works and BT simply don't care.  I have kept leaving feedback - nothing in response!  On-line chat absolutely hopeless - told me to clear my cache.  Speaking on phone even worse - I could not understand the person because of his accent, the speed of his speech and generally difficult to have a 'conversation' with.  I am considering leaving BT because it is making me so frustrated.  What have BT done to cause this?!  It is nothing I have done - the problem lies with BT and, as I said previously, they simply do not care!  They are collecting the DD every month and that appears to be all they are interested in!