← Customer 14024067

#34741 AT&T called

Resolved Created Jun 11, 2025, 3:42 PM Resolved Jun 11, 2025, 8:42 PM
System (internal) Jun 11, 2025, 3:42 PM
Created from Lead: https://artichoke.shield.syncromsp.com/leads/32953202/convert
Check-in (internal) Jun 11, 2025, 3:42 PM
Hey all,

AT&T's fraud department called and said someone by the name of Jacob Brown was trying to open a wireless services account with Ramey's email address and Five Valleys Land Trust's information.

Im not sure what we can do if anything here as they are just using our information, but I wanted to flag this in case Ramey's email is compromised.

Ramey are you getting emails from AT&T?

Boston Wakeham
Finance and Operations Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | C: 515.419.5440 O: 406.519.5190
Artichoke Support - Peet (internal) Jun 11, 2025, 4:00 PM
I checked Ramey's logins for the past 30 days and there's nothing outside of Misssoula ... I'm doublechecking a few other settings, and will let you know.

Cheers.Peet
customer-reply (internal) Jun 11, 2025, 4:10 PM
yes, I just got an email. What should I do?

Ramey Kodadek
Philanthropy Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | Direct Line: 1.406.519.5199

[Make a gift to Five Valleys today](https://www.fvlt.org/donations#Give-Now)

---------------------------------------------------------------

From: Boston Wakeham <[email protected]>
Sent: Wednesday, June 11, 2025 9:42 AM
To: Peet Mckinny <[email protected]>
Cc: Ramey Kodadek <[email protected]>
Subject: AT&T called

Hey all,

AT&T's fraud department called and said someone by the name of Jacob Brown was trying to open a wireless services account with Ramey's email address and Five Valleys Land Trust's information.

Im not sure what we can do if anything here as they are just using our information, but I wanted to flag this in case Ramey's email is compromised.

Ramey are you getting emails from AT&T?

Boston Wakeham
Finance and Operations Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | C: 515.419.5440 O: 406.519.5190
customer-reply (internal) Jun 11, 2025, 4:14 PM
Hang tight while Peet is poking around.

If you could, please forward the email to us.

Boston Wakeham
Finance and Operations Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | C: 515.419.5440 O: 406.519.5190

---------------------------------------------------------------

From: Ramey Kodadek <[email protected]>
Sent: Wednesday, June 11, 2025 10:10 AM
To: Boston Wakeham <[email protected]>; Peet Mckinny <[email protected]>
Subject: Re: AT&T called

yes, I just got an email. What should I do?

Ramey Kodadek
Philanthropy Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | Direct Line: 1.406.519.5199

[Make a gift to Five Valleys today](https://www.fvlt.org/donations#Give-Now)

---------------------------------------------------------------

From: Boston Wakeham <[email protected]>
Sent: Wednesday, June 11, 2025 9:42 AM
To: Peet Mckinny <[email protected]>
Cc: Ramey Kodadek <[email protected]>
Subject: AT&T called

Hey all,

AT&T's fraud department called and said someone by the name of Jacob Brown was trying to open a wireless services account with Ramey's email address and Five Valleys Land Trust's information.

Im not sure what we can do if anything here as they are just using our information, but I wanted to flag this in case Ramey's email is compromised.

Ramey are you getting emails from AT&T?

Boston Wakeham
Finance and Operations Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | C: 515.419.5440 O: 406.519.5190
customer-reply (internal) Jun 11, 2025, 4:19 PM
Thanks! Just sent an email to you.

Ramey Kodadek
Philanthropy Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | Direct Line: 1.406.519.5199

[Make a gift to Five Valleys today](https://www.fvlt.org/donations#Give-Now)

---------------------------------------------------------------

From: Boston Wakeham <[email protected]>
Sent: Wednesday, June 11, 2025 10:13 AM
To: Ramey Kodadek <[email protected]>; Peet Mckinny <[email protected]>
Subject: Re: AT&T called

Hang tight while Peet is poking around.

If you could, please forward the email to us.

Boston Wakeham
Finance and Operations Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | C: 515.419.5440 O: 406.519.5190

---------------------------------------------------------------

From: Ramey Kodadek <[email protected]>
Sent: Wednesday, June 11, 2025 10:10 AM
To: Boston Wakeham <[email protected]>; Peet Mckinny <[email protected]>
Subject: Re: AT&T called

yes, I just got an email. What should I do?

Ramey Kodadek
Philanthropy Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | Direct Line: 1.406.519.5199

[Make a gift to Five Valleys today](https://www.fvlt.org/donations#Give-Now)

---------------------------------------------------------------

From: Boston Wakeham <[email protected]>
Sent: Wednesday, June 11, 2025 9:42 AM
To: Peet Mckinny <[email protected]>
Cc: Ramey Kodadek <[email protected]>
Subject: AT&T called

Hey all,

AT&T's fraud department called and said someone by the name of Jacob Brown was trying to open a wireless services account with Ramey's email address and Five Valleys Land Trust's information.

Im not sure what we can do if anything here as they are just using our information, but I wanted to flag this in case Ramey's email is compromised.

Ramey are you getting emails from AT&T?

Boston Wakeham
Finance and Operations Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | C: 515.419.5440 O: 406.519.5190
Artichoke Support - Peet (internal) Jun 11, 2025, 5:07 PM
I don't see any rules on Ramey's inbox or anything else that suggests an M365 compromise. I can't fathom why they would use her email for this as there's no way for them to manage the order via her email ... ¯\_(ツ)_/¯

That said, if there are no charges attempted on any FVLT cards, I'd lean toward a this being a misguided attempt at fraud. Or the fraudsters are going to try to reach out after this attempt posing as ATT fraud and try to trick you into doing something that would get them $.

Cheers.Peet
customer-reply (internal) Jun 11, 2025, 6:28 PM
Looks like we don't have any charges on our cards so they must have been using other card information with our company information. No wonder it got flagged.

Ramey, there is not much that we can do here but take note and to know that we are not dealing at all with AT&T if something comes up in the future. Let us know if you get anything else on your end that is suspicious so we can continue to monitor.

Thank you both and sorry for the hassle.

Boston Wakeham
Finance and Operations Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | C: 515.419.5440 O: 406.519.5190

---------------------------------------------------------------

From: Artichoke Support - Peet <[email protected]>
Sent: Wednesday, June 11, 2025 11:07 AM
To: Boston Wakeham <[email protected]>
Cc: Ramey Kodadek <[email protected]>
Subject: AT&T called (message id: 95826917)
customer-reply (internal) Jun 11, 2025, 6:57 PM
Will do. Sorry about this.

Ramey Kodadek
Philanthropy Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | Direct Line: 1.406.519.5199

[Make a gift to Five Valleys today](https://www.fvlt.org/donations#Give-Now)

---------------------------------------------------------------

From: Boston Wakeham <[email protected]>
Sent: Wednesday, June 11, 2025 12:28 PM
To: Artichoke Support - Peet <[email protected]>
Cc: Ramey Kodadek <[email protected]>
Subject: Re: AT&T called (message id: 95826917)

Looks like we don't have any charges on our cards so they must have been using other card information with our company information. No wonder it got flagged.

Ramey, there is not much that we can do here but take note and to know that we are not dealing at all with AT&T if something comes up in the future. Let us know if you get anything else on your end that is suspicious so we can continue to monitor.

Thank you both and sorry for the hassle.

Boston Wakeham
Finance and Operations Director

Five Valleys Land Trust
120 Hickory Street, Suite B | Missoula, MT 59801
W: [fvlt.org](http://www.fvlt.org/) | C: 515.419.5440 O: 406.519.5190

---------------------------------------------------------------

From: Artichoke Support - Peet <[email protected]>
Sent: Wednesday, June 11, 2025 11:07 AM
To: Boston Wakeham <[email protected]>
Cc: Ramey Kodadek <[email protected]>
Subject: AT&T called (message id: 95826917)