This is an automated archive.
The original was posted on /r/sysadmin by /u/Duerogue on 2023-10-24 12:22:39+00:00.
If I hadn't seen it myself I would have archived the ticket under the Tag "User Hallucinating".
Thing is, User opens his Outlook GAL, we're getting A LOT of Deutsche Telekom Addresses, everything looking legit. Just..it's not ours.
So we just go full emergency, assume the Global Admin has been hacked, check all logs.. Not a single sign of a breach. No apps, no logins, no change in our GAL policies.
Close the Addressbook (not even Outlook) reopen it.. it's back to normal.
Had I not made a screenshot I would have questioned my own sanity.
Anything similar happened to any of you?