Searching for EXACT phishing pattern across all mailboxes... Looking for: Subject contains "January Bonus and Allocation for All Staff" AND NOT from internal/Mike addresses Also checking for December variant... === ACTUAL PHISHING EMAILS FOUND: 36 === User: jantar@dataforth.com Subject: Tax Documents 2018 through 2022 From: /o=dataforth/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=jacque antar482 Date: 2024-03-01T17:08 User: jantar@dataforth.com Subject: 2020 Reviewed Financial Statements From: dbarber@rcmllp.com Date: 2021-07-26T18:23 User: jantar@dataforth.com Subject: 2019 TAX RETURN From: cnamour@rcmllp.com Date: 2021-06-07T18:58 User: jantar@dataforth.com Subject: Dataforth 2019 reviewed financial statements From: dbarber@rcmllp.com Date: 2020-08-03T17:30 User: jantar@dataforth.com Subject: Reviewed financial statements From: dbarber@rcmllp.com Date: 2020-07-28T22:33 User: jantar@dataforth.com Subject: Draft and management representation letter From: cgoding@rcmllp.com Date: 2020-07-23T15:46 User: jantar@dataforth.com Subject: R&D Files From: steve.roark@claconnect.com Date: 2017-10-17T19:36 User: jantar@dataforth.com Subject: Dataforth - R&D Tax Credit Study Kick Off From: steve.roark@claconnect.com Date: 2015-01-20T01:38 User: JBecerra@dataforth.com Subject: Please Print From: kbecerra@celestica.com Date: 2018-04-18T17:01 User: jlohr@dataforth.com Subject: Dataforth Corporation 2025-2026 Insurance Policies From: /o=exchangelabs/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=6be61e02b56146b48db17824a3ebc9d3-ebbb9e8a-a2 Date: 2025-03-13T19:08 User: jlohr@dataforth.com Subject: Dataforth Corporation 2025-2026 Insurance Policies From: jessica.rin@hubinternational.com Date: 2025-03-13T19:02 User: jlohr@dataforth.com Subject: Renewal Policies From: teresa.mcinturff@hubinternational.com Date: 2024-04-19T15:39 User: jlohr@dataforth.com Subject: Dataforth 2024 Business Insurance Quote From: /o=dataforth/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=joel lohre42 Date: 2024-01-10T14:28 User: jlohr@dataforth.com Subject: 2/23/22 - 2/23/23 Commercial Package Policy From: faith.ortiz@hubinternational.com Date: 2022-03-08T18:13 User: jlohr@dataforth.com Subject: 2/23/22 - 2/23/23 International Package Policy From: faith.ortiz@hubinternational.com Date: 2022-02-23T23:37 User: jlohr@dataforth.com Subject: International From: fortiz@clementsinsurance.com Date: 2021-02-09T15:16 User: jlohr@dataforth.com Subject: 2/23/20 - 2/23/21 International Policy From: fortiz@clementsinsurance.com Date: 2020-02-24T20:16 User: jlohr@dataforth.com Subject: Dataforth policies From: /o=dataforth/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=joel lohre42 Date: 2019-10-16T17:27 User: jlohr@dataforth.com Subject: 2019 Insurance docs, including Commercial Package From: /o=dataforth/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=joel lohre42 Date: 2019-04-03T13:39 User: jlohr@dataforth.com Subject: 2/23/19 - 2/23/20 Commercial Package Policy & Endorsement From: fortiz@clementsinsurance.com Date: 2019-04-03T00:31 User: jlohr@dataforth.com Subject: Insurance doc From: /o=dataforth/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=joel lohre42 Date: 2019-03-19T16:09 User: jlohr@dataforth.com Subject: Dataforth From: brandon.boyd@chubb.com Date: 2018-02-22T21:27 User: lpayne@dataforth.com Subject: Dataforth - 2012 R&D IRS Audit files - email 2 From: steve.roark@claconnect.com Date: 2016-03-25T17:54 User: lpayne@dataforth.com Subject: Dataforth - 2012 R&D IRS Audit files - email 1 From: steve.roark@claconnect.com Date: 2016-03-25T17:37 User: lpayne@dataforth.com Subject: Dataforth - R&D Tax Credit Study Kick Off From: steve.roark@claconnect.com Date: 2015-01-20T01:38 User: mflorez@dataforth.com Subject: libro From: /o=dataforth/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=martin florez826 Date: 2020-07-29T15:19 User: mflorez@dataforth.com Subject: book From: /o=dataforth/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=martin florez826 Date: 2020-07-29T15:04 User: mhvidsten@dataforth.com Subject: WTC-KY Newsstand - Powered by Lexology From: noreply.wtc-ky@lexology.com Date: 2025-07-17T11:00 User: spoanessa@dataforth.com Subject: Wireshark Textbook. From: /o=dataforth/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=stephen poanessa5e7 Date: 2022-01-10T14:08 User: jantar@dataforth.com Subject: Tax returns From: /o=exchangelabs/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=388731a3f7584d8682d9c867562dc0a5-daa60027-be Date: 2025-12-08T18:50 User: jantar@dataforth.com Subject: Firm disclosures and required information From: hwong@juncturewealthadvisors.com Date: 2020-11-02T17:32 User: jlohr@dataforth.com Subject: 2/23/19 - 2/23/20 Management Liability Policy From: fortiz@clementsinsurance.com Date: 2019-03-15T22:18 User: lpayne@dataforth.com Subject: 2026 Financial Proforma From: /o=exchangelabs/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=95cfe78f82854975954b1bc849812cf5-3509595d-ad Date: 2025-11-26T21:56 User: lpayne@dataforth.com Subject: 2025 Financial Proforma From: /o=exchangelabs/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=95cfe78f82854975954b1bc849812cf5-3509595d-ad Date: 2024-11-14T18:56 User: lpayne@dataforth.com Subject: Income Statements From: /o=dataforth/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=lee paynec33 Date: 2016-07-21T16:54 User: lpayne@dataforth.com Subject: Dataforth Proforma Financials for 2016 From: /o=dataforth/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=lee paynec33 Date: 2016-04-21T16:37 Ready to delete 36 confirmed phishing emails.