NB-27-25 [200~From: cfo@northbridge.local To: leadership@northbridge.local Date: Wed, 20 Aug 2025 09:44:27 -0500 Subject: Great Job on Q3 Results Thank you for your hard work. Q3 exceeded expectations — revenue up, churn down. Let’s keep executing. --- From: coo@northbridge.local To: exec-team@northbridge.local Date: Wed, 20 Aug 2025 17:46:07 -0500 Subject: Customer Visit A key client will be onsite tomorrow. Please keep shared spaces tidy and be available for demos if requested. --- From: it-support@northbridge.local To: all@northbridge.local Date: Thu, 21 Aug 2025 15:12:45 -0500 Subject: VPN Phish Campaign We’ve detected a new phishing campaign spoofing IT. Do not click links or open attachments from unknown senders. Report to security@northbridge.local. --- From: linda.roberts@northbridge.local To: marketing-team@northbridge.local Date: Thu, 21 Aug 2025 18:17:15 -0500 Subject: Lunch? Thinking about sushi on Wednesday around noon. Anyone interested? If not, pizza is a solid backup. --- From: it-security@northbridge.local To: all@northbridge.local Date: Sat, 23 Aug 2025 14:51:55 -0500 Subject: Jenkins Pipeline Outage CI/CD pipeline is currently down. Engineers are investigating. ETA for recovery is 2 hours. Updates will follow in Slack #it-ops. --- From: random.offer@cheapmeds.cn To: sales@northbridge.local Date: Sat, 23 Aug 2025 15:13:32 -0500 Subject: Special Discount - Pharmacy Direct Lowest prices guaranteed! Click here: http://cheappharma.cn/deals (* flagged as spam *) --- From: victoria.davis@northbridge.local To: all@northbridge.local Date: Sat, 23 Aug 2025 16:40:10 -0500 Subject: Weekend Plans How was everyone’s weekend? I caught the game — wild finish. Ready for the sprint planning tomorrow. --- From: it-support@northbridge.local To: it@northbridge.local Date: Sat, 23 Aug 2025 16:47:34 -0500 Subject: Phishing Alert - Gift Cards We’ve detected a new phishing campaign spoofing IT. Do not click links or open attachments from unknown senders. Report to security@northbridge.local. --- From: olivia.martinez@northbridge.local To: sales@northbridge.local Date: Sun, 24 Aug 2025 10:55:06 -0500 Subject: FYI FYI: I’ll be OOO 3–5 PM for an appointment. Ping me on Slack if there’s anything urgent. --- From: noreply@ext-mail.biz To: purchasing@northbridge.local Date: Sun, 24 Aug 2025 13:42:37 -0500 Subject: Invoice 99827 Due Overdue invoice. Download now: http://ext-mail.biz/invoice99827 (* flagged as phishing *) --- From: john.smith@northbridge.local To: finance-team@northbridge.local Date: Sun, 24 Aug 2025 16:27:02 -0500 Subject: Weekend Plans How was everyone’s weekend? I caught the game — wild finish. Ready for the sprint planning tomorrow. --- From: robert.nguyen@northbridge.local To: all@northbridge.local Date: Mon, 25 Aug 2025 07:25:46 -0500 Subject: Lunch? Thinking about sushi on Wednesday around noon. Anyone interested? If not, pizza is a solid backup. --- From: noreply@ext-mail.biz To: purchasing@northbridge.local Date: Mon, 25 Aug 2025 17:19:53 -0500 Subject: Invoice 99827 Due Overdue invoice. Download now: http://ext-mail.biz/invoice99827 (* flagged as phishing *) --- From: it-support@northbridge.local To: devops@northbridge.local Date: Tue, 26 Aug 2025 17:41:19 -0500 Subject: Laptop Return Reminder Reminder to return loaner laptops by EOW so we can reimage and redeploy. Contact IT Support to schedule a drop-off. --- From: it-security@northbridge.local To: all@northbridge.local Date: Wed, 27 Aug 2025 15:31:05 -0500 Subject: Patch Rollout Tonight at 11 PM we will deploy OS and application updates to production servers. Expect brief restarts per host; save your work. --- From: coo@northbridge.local To: leadership@northbridge.local Date: Thu, 28 Aug 2025 11:33:55 -0500 Subject: Great Job on Q3 Results Thank you for your hard work. Q3 exceeded expectations — revenue up, churn down. Let’s keep executing. --- From: noreply@northbridgepromo.net To: it@northbridge.local Date: Thu, 28 Aug 2025 13:31:30 -0500 Subject: Your Microsoft 365 Account Is Expiring Your mailbox storage is full. Verify now: http://northbridge365-auth.com/login (* flagged as phishing *) --- From: hr@northbridge.local To: managers@northbridge.local Date: Fri, 29 Aug 2025 08:38:04 -0500 Subject: Welcome New Employees Please welcome our new colleagues joining this week. Managers, confirm onboarding checklists are completed. New hire orientation details are on the HR portal. --- From: alex.morgan@northbridge.local To: ops@northbridge.local Date: Fri, 29 Aug 2025 09:23:48 -0500 Subject: Gym after work? Anyone up for a quick workout after work? Planning on hitting the gym at 6. --- From: it-support@northbridge.local To: all@northbridge.local Date: Fri, 29 Aug 2025 15:28:08 -0500 Subject: Phishing Alert - Gift Cards We’ve detected a new phishing campaign spoofing IT. Do not click links or open attachments from unknown senders. Report to security@northbridge.local. --- From: it-support@northbridge.local To: all@northbridge.local Date: Sun, 31 Aug 2025 07:04:45 -0500 Subject: Urgent - Password Reset Due to a security update, all employees must reset their network password by Friday. Use https://portal.northbridge.local to change it. --- From: it-security@northbridge.local To: it@northbridge.local Date: Mon, 01 Sep 2025 10:04:21 -0500 Subject: System Maintenance Window Scheduled maintenance will occur this weekend, Sat 22:00–Sun 02:00. Network services may be briefly unavailable. --- From: it-security@northbridge.local To: devops@northbridge.local Date: Tue, 02 Sep 2025 07:46:29 -0500 Subject: Urgent - Password Reset Due to a security update, all employees must reset their network password by Friday. Use https://portal.northbridge.local to change it. --- From: service@bank-alert.com To: accounting@northbridge.local Date: Thu, 04 Sep 2025 10:03:15 -0500 Subject: Urgent - Verify Your Bank Account Immediate action required for account ending 4492: http://secure-bank-alert.com (* flagged as phishing *) --- From: coo@northbridge.local To: leadership@northbridge.local Date: Thu, 04 Sep 2025 11:13:42 -0500 Subject: Great Job on Q3 Results Thank you for your hard work. Q3 exceeded expectations — revenue up, churn down. Let’s keep executing. --- From: it-support@northbridge.local To: devops@northbridge.local Date: Fri, 05 Sep 2025 08:05:24 -0500 Subject: Laptop Return Reminder Reminder to return loaner laptops by EOW so we can reimage and redeploy. Contact IT Support to schedule a drop-off. --- From: alex.morgan@northbridge.local To: dev-team@northbridge.local Date: Fri, 05 Sep 2025 08:18:27 -0500 Subject: Lunch? Thinking about sushi on Wednesday around noon. Anyone interested? If not, pizza is a solid backup. --- From: it-support@northbridge.local To: devops@northbridge.local Date: Sat, 06 Sep 2025 08:56:15 -0500 Subject: Patch Rollout Tonight at 11 PM we will deploy OS and application updates to production servers. Expect brief restarts per host; save your work. --- From: ceo@northbridge.local To: all@northbridge.local Date: Sat, 06 Sep 2025 16:12:45 -0500 Subject: Great Job on Q3 Results Thank you for your hard work. Q3 exceeded expectations — revenue up, churn down. Let’s keep executing. --- From: linda.roberts@northbridge.local To: all@northbridge.local Date: Sun, 07 Sep 2025 09:23:22 -0500 Subject: Quick Question Quick Q: did we confirm the metrics with Finance before sending the deck to the exec team? Want to make sure our numbers match. --- From: it-support@northbridge.local To: it@northbridge.local Date: Sun, 07 Sep 2025 11:59:40 -0500 Subject: Phishing Alert - Gift Cards We’ve detected a new phishing campaign spoofing IT. Do not click links or open attachments from unknown senders. Report to security@northbridge.local. --- From: noreply@externalvpn-login.net To: user@northbridge.local Date: Sun, 07 Sep 2025 14:57:33 -0500 Subject: VPN Account Locked Unlock your account here: http://externalvpn-login.net (* flagged as phishing *) --- From: it-support@northbridge.local To: devops@northbridge.local Date: Mon, 08 Sep 2025 07:10:24 -0500 Subject: Phishing Alert - Gift Cards We’ve detected a new phishing campaign spoofing IT. Do not click links or open attachments from unknown senders. Report to security@northbridge.local. --- From: service@bank-alert.com To: accounting@northbridge.local Date: Mon, 08 Sep 2025 11:04:13 -0500 Subject: Urgent - Verify Your Bank Account Immediate action required for account ending 4492: http://secure-bank-alert.com (* flagged as phishing *) --- From: samantha.taylor@northbridge.local To: kevin.lee@northbridge.local Date: Tue, 09 Sep 2025 13:22:00 -0500 Subject: Data Inventory — Please Review Hi Kevin, Per our discussion in Legal, here’s the location of the latest data inventory so you can review the entries for Legal and Compliance: http://policyctf.com/docs/compliance/data_inventory.txt Let me know if anything looks off and I’ll coordinate updates with Compliance. Thanks, Samantha Taylor Compliance --- From: olivia.martinez@northbridge.local To: ops@northbridge.local Date: Tue, 09 Sep 2025 16:04:24 -0500 Subject: FYI FYI: I’ll be OOO 3–5 PM for an appointment. Ping me on Slack if there’s anything urgent. --- From: james.miller@northbridge.local To: sarah.lopez@northbridge.local Date: Wed, 10 Sep 2025 09:14:00 -0500 Subject: Device Encryption Required Hi Sarah, As part of our HIPAA device hardening effort, IT is enabling BitLocker on all laptops that may access PHI. Our records show your device is not encrypted yet. Can we schedule time this week to complete encryption? It typically takes 60–90 minutes while the laptop is plugged in. Thanks, James Miller IT Security --- From: sarah.lopez@northbridge.local To: james.miller@northbridge.local Date: Wed, 10 Sep 2025 11:02:00 -0500 Subject: RE: Device Encryption Required Hi James, Thanks for the heads-up. I’m traveling to Europe in two weeks for a benefits vendor summit. Could we do the encryption early so I’m set before I leave? Best, Sarah --- From: hr@northbridge.local To: all@northbridge.local Date: Wed, 10 Sep 2025 12:27:26 -0500 Subject: Wellness Wednesday Join Wellness Wednesday at 12:30 PM for Chair Yoga in the break room. All are welcome. --- From: noreply@unknown-prizes.ru To: randomuser@northbridge.local Date: Thu, 11 Sep 2025 09:16:08 -0500 Subject: Collect Your Winnings Claim your $1,000 now: http://unknown-prizes.ru (* flagged as spam *) --- From: james.miller@northbridge.local To: sarah.lopez@northbridge.local Date: Thu, 11 Sep 2025 10:15:00 -0500 Subject: RE: Device Encryption Required Hi Sarah, Yes, I’ll prioritize this today. Swing by IT when you’re free and we’ll get it started. Thanks, James --- From: noreply@externalvpn-login.net To: user@northbridge.local Date: Fri, 12 Sep 2025 09:12:18 -0500 Subject: VPN Account Locked Unlock your account here: http://externalvpn-login.net (* flagged as phishing *) --- From: service@bank-alert.com To: accounting@northbridge.local Date: Fri, 12 Sep 2025 10:34:08 -0500 Subject: Urgent - Verify Your Bank Account Immediate action required for account ending 4492: http://secure-bank-alert.com (* flagged as phishing *) --- From: sophia.thomas@northbridge.local To: dev-team@northbridge.local Date: Fri, 12 Sep 2025 10:50:30 -0500 Subject: Weekend Plans How was everyone’s weekend? I caught the game — wild finish. Ready for the sprint planning tomorrow. --- From: hr@northbridge.local To: all@northbridge.local Date: Fri, 12 Sep 2025 15:58:54 -0500 Subject: Performance Reviews Templates are available in the HR portal. Managers must submit reviews by Oct 15. Reach out to HR if you have questions. --- From: random.offer@cheapmeds.cn To: sales@northbridge.local Date: Mon, 15 Sep 2025 09:08:42 -0500 Subject: Special Discount - Pharmacy Direct Lowest prices guaranteed! Click here: http://cheappharma.cn/deals (* flagged as spam *) --- From: it-support@northbridge.local To: it@northbridge.local Date: Mon, 15 Sep 2025 11:47:37 -0500 Subject: VPN Phish Campaign We’ve detected a new phishing campaign spoofing IT. Do not click links or open attachments from unknown senders. Report to security@northbridge.local. --- From: james.miller@northbridge.local To: sarah.lopez@northbridge.local Date: Mon, 15 Sep 2025 14:46:00 -0500 Subject: Encryption Completed Hi Sarah, BitLocker is now enabled on your laptop and the recovery key has been escrowed in Active Directory. You’re all set for travel. — James --- From: sarah.lopez@northbridge.local To: james.miller@northbridge.local Date: Mon, 15 Sep 2025 15:08:00 -0500 Subject: RE: Encryption Completed Perfect — I tested everything and it looks good. Thanks for the quick turnaround before my trip! Sarah --- From: it-security@northbridge.local To: it@northbridge.local Date: Mon, 15 Sep 2025 18:19:39 -0500 Subject: Laptop Return Reminder Reminder to return loaner laptops by EOW so we can reimage and redeploy. Contact IT Support to schedule a drop-off. ---