Security Advisory from isolved
Fraudulent "isolved Account Verification" Emails
isolved identified a phishing campaign impersonating them. The emails did not originate from isolved or any isolved-affiliated system. If you received one, do not click any links or enter credentials.
How to Identify the Email
| Indicator | Detail |
|---|---|
|
Display Name |
“isolved security team” |
|
Sender Address |
|
|
Subject Line |
“Action Required: Your isolved Account Verification Expires Soon” |
|
Body |
Claims account verification will lapse on October 4, 2026, and that access to payroll, benefits and HR records will be suspended |
|
Call to Action |
A “Re-Verify My Account” button |
*Lookalike domain: The fraudulent domain substitutes the letters “r” and “n” for the “m” in myisolved.com. At small font sizes, “rn” appears nearly identical to “m”. Please verify the full sender domain, not just the display name.
What to Do
- Do not click the “Re-Verify My Account” button or any other link or attachment in the message.
- Do not reply to the email or enter credentials on any page it leads to.
- Mark it as Spam/Phishing.
- Delete the message after reporting.
If you already clicked or entered credentials
- Change your password immediately, and any other account that uses the same password.
- Contact isolved Customer Support right away so we can review account activity and help secure your access.
- Notify your organization’s IT or security team, since your employer’s directory credentials may also be at risk.
Our commitment
isolved does not request credential re-verification through unsolicited email links. Legitimate communications come only from approved isolved domains, such as myisolved.com. If you are unsure whether a message is legitimate, access the platform by typing the address directly into your browser or using your saved bookmark, rather than following an email link.