Proofpoint Security Awareness Training incident
Report Suspicious - Admin Email Notifications
Proofpoint Security Awareness Training experienced a notice incident on October 9, 2025, lasting —. The incident has been resolved; the full update timeline is below.
Update timeline
- resolved Oct 09, 2025, 06:13 PM UTC
On October 7, a product update unintentionally caused Admin Email Notifications to be sent to previously configured admin email addresses, even if the notification feature had been disabled. Admin Email Notifications are the raw reported messages forwarded from users’ mail clients to the email addresses you’ve defined. These messages have a subject line prepended with “Potential” or “Simulated Phish”. In affected environments, administrators had disabled the notification feature but had not removed the associated email addresses. The October 7 update caused Report Suspicious to resume sending notifications to those stored addresses. On October 8, we deployed a fix to correct this behavior. Admin Email Notifications are now respecting the configured settings, and no further unexpected forwarding is occurring. We apologize for the disruption and appreciate your understanding.