Atlassian and Trello emails Feb 2021

Summary

The Atlassian and Trello emails were a vendor mistake, you can ignore them.

If you reported this to security@lbl.gov, that was a reasonable step as this was indeed suspicious; we appreciate your vigilance.

Background

On Feb 9, 2021 Atlassian and Trello sent a number of confusing emails to every account at the Lab (~1800) using one of their services (Bitbucket, Confluence, Jira, etc.).  A copy of each of the emails is below.  If you reading this page, you probably got one of these emails.

Resolution

Late in the evening of Feb 9, 2021, Atlassian posted a message on their website stating in part “We have identified an incident that has caused a trigger of false email notifications to a small number of customers, stating an update has been initiated by the customer admin.”

We have verified that this change has been rolled backup in Atlassian and no further action is required at this time.

You can read the full Atlassian text at https://access.status.atlassian.com/incidents/d0qv1lsb5npv

Feedback

Comments and feedback of any sort is welcome. Please send email to security@lbl.gov.