#36758 [Huntress Escalation] Login from unexpected VPN - Express VPN

Resolved 2 Normal Created Dec 22, 2025, 6:35 PM Resolved Dec 29, 2025, 5:59 PM

Huntress (internal) Dec 22, 2025, 6:35 PM

Huntress detected one or more logins using Express VPN. This VPN was not expected or unauthorized by an access rule when the login was observed.

Action required: Let Huntress know if logins using Express VPN are unauthorized and should be reported as an incident or if this login was expected. Review the escalation for more details.

Organization: Williams Law Firm, PC
Escalation: https://artichoke.huntress.io/org/53144/escalations/444830

Artichoke Support - Peet (internal) Dec 22, 2025, 10:12 PM

Peter,

I'm just making sure that you are actively using the Express VPN to connect to wmslaw.com 365 resourcess. Please let me know as soon as possible.

Thanks.Peet

Huntress detected one or more logins using Express VPN. This VPN was not expected or unauthorized by an access rule when the login was observed.

customer-reply (internal) Dec 22, 2025, 10:17 PM

I use Express VPN on my phone sometimes, but I don’t think on my computer. But I do access my work email on the phone.

On Dec 22, 2025, at 11:13 PM, Artichoke Support - Peet <[email protected]> wrote:

customer-reply (internal) Dec 29, 2025, 8:04 AM

Hey Peet, I’m in Tbilisi Georgia for my wedding. I should have emailed you earlier. I’m not working but was just going to put on automatic replies but I can’t seem to access the email. If you could authorize that would be great. Thanks!

On Dec 23, 2025, at 2:13 AM, Artichoke Support - Peet <[email protected]> wrote:

Artichoke Support - Peet (internal) Dec 29, 2025, 5:59 PM

You should be good for GE. Any other countries?

And congrats!

Cheers.Peet