Information – Compromised Account Process Update

20/10/2022 16:03:00 PM (BST)

Please note, as part of our continued commitment to maintaining security and stability across the NHSmail Service, we are making a change to the activities undertaken when an account is identified as having been compromised. From 7pm on 20th October 2022, accounts that have been identified as having been compromised will have all applied mailbox rules disabled as an additional security measure.

 Once an impacted account has been remediated, as per the existing process, the account owner will be required to re-enable any legitimate mailbox rules as appropriate.

 PLEASE NOTE : The responsibility for any mailbox rule being enabled within the end user’s mailbox is on the end user. Please ensure you work with your users to ensure you have taken time to verify, validate, and positively identify the rules that you are reactivating are legitimate and still required.

 If you require additional help and support, the NHSmail helpdesk is available 24 hours-a-day, 7 days-a-week on 0333 200 1133 or by emailing

back to top