- XMission Email Announcements - mailman.xmission.com

Action Required: Update MX Records for VIPRE Email Security Cloud
by XMission Support 16 Sep '25

16 Sep '25

Email from XMission Action Required: Update MX Records for VIPRE Email Security Cloud Hello, As part of ongoing improvements to inbound email security, VIPRE has introduced new MX (Mail Exchanger) records for the Email Security Cloud platform. All domains that use VIPRE for filtering need to update their DNS so inbound mail continues to flow through VIPRE and remain protected. What you need to do 1. Find your VIPRE MX record * Log in to the VIPRE Email Security Cloud console. * Click Getting Started in the top right corner and select your region (North America or Europe). * Copy the MX host shown there. 2. Update your DNS * Sign in to your DNS registrar (GoDaddy, Cloudflare, Namecheap, etc.). * Go to the DNS management page for your domain. * Replace your old MX record(s) with the new VIPRE value, keeping the priority that VIPRE lists. 3. Verify * DNS changes may take up to 48 hours to propagate. * Once live, all inbound mail will be scanned by VIPRE before delivery to your mail server. If you are unsure of your DNS host, you can check via ICANN Lookup or Who.is. Why this matters Domains that do not update their MX records will eventually bypass VIPRE filtering, which removes spam/malware protection and may interrupt mail delivery. Please make these changes as soon as possible to ensure uninterrupted email security. If you need help identifying your MX records or updating DNS, contact XMission Support at support(a)xmission.com or 801-539-0852. Thanks for acting quickly to keep your mail secure. [ https://survey.xmission.com/ | Our survey ] · [ https://bsky.app/profile/xmission.bsky.social | Bluesky ] · [ https://www.facebook.com/XMissionInternet | Facebook ] · [ https://bsky.app/profile/xmissionstatus.bsky.social | XM Status ] · [ https://status.xmission.com/ | System Status ]

1 0

Security notice and upcoming improvements to XMission email
by XMission Support 13 Aug '25

13 Aug '25

Security notice and upcoming improvements to XMission email On Monday, July 11, XMission experienced a breach involving our hosted Zimbra email system. A highly targeted phishing email compromised the account of a recently hired staff member. The breach was identified on July 30 during a forensic review of unusual outbound activity. Once identified, we secured the account, launched an internal investigation, and reviewed administrative access across the platform. Our review found that the compromised account had been mistakenly granted global Zimbra administrative access during onboarding. We have corrected this and tightened controls. There is no evidence that inbox contents or personal messages were accessed or exported. No password data was extracted by the attacker. The attacker was able to obtain a list of hosted email addresses with first and last names. We believe this is the source of the recent increase in phishing emails that impersonate XMission and some customers. In a small number of cases, the attacker set up unauthorized mail forwarding rules on individual mailboxes. Those rules have been removed. We will notify any affected customers directly. What happened * July 11: a phishing email from a lookalike domain was opened by a new employee. * The account had unnecessary global administrative access, which exposed account metadata (email addresses and names). * July 30: mail administrators detected and contained the breach during a forensic review. * We secured the account, audited admin activity, and began a broader security review. What we are doing now * Mandatory 2FA for all global administrative roles and a full review of privileged access. * Additional monitoring, rate limiting, and scanning on authenticated email flows. * Process changes so non-technical roles do not receive elevated permissions. Our path forward: introducing iRedMail For more than a year we have been preparing a new shared email hosting platform based on iRedMail Enterprise Edition. It is modern, secure, and built on open standards. The recent incident reinforced why this move makes sense for our customers. iRedMail gives us stronger security controls, faster updates, and direct control over system changes. We are accelerating the rollout. Migrations will begin soon and complete by Q4 2025. We will coordinate with each customer ahead of time to ensure a smooth transition and uninterrupted service. What will change * New webmail experience and hostnames. The current zimbra.xmission.com login will be replaced. We will send the new login details before your migration window. * For @xmission.com mailboxes: iRedMail with Roundcube webmail (email, POP, IMAP). * For business domains: iRedMail with SOGo webmail (email, POP, IMAP, ActiveSync, calendars, contacts, shared folders). * Stronger phishing and spam protections, and more frequent security updates. What you should do now * Treat emails that urge immediate action with caution. Do not click links if you are unsure. * If a message claims to be from XMission, verify by logging in directly through our website or your control panel, not through email links. * Report suspicious messages by marking them as spam or forwarding them to spam(a)xmission.com. * If you believe an account has been tampered with, change the password and contact our support team. For customers who need Zimbra We understand some customers rely on Zimbra’s collaboration features. We will offer dedicated, isolated Zimbra virtual machines in our data center for those needs. These will be managed and priced based on resources. We will provide details in advance. We take the protection of your data seriously. We regret this incident and have addressed the root causes. Our team is available 24/7 to answer questions and help secure your domain. [ https://survey.xmission.com/ | Our survey ] · [ https://bsky.app/profile/xmission.bsky.social | Bluesky ] · [ https://www.facebook.com/XMissionInternet | Facebook ] · [ https://bsky.app/profile/xmissionstatus.bsky.social | XM Status ] · [ https://status.xmission.com/ | System Status ]

1 0

Security notice and upcoming improvements to XMission email
by XMission Support 13 Aug '25

13 Aug '25

Email from XMission Security notice and upcoming improvements to XMission email On Monday, July 11, XMission experienced a breach involving our hosted Zimbra email system. A highly targeted phishing email compromised the account of a recently hired staff member. The breach was identified on July 30 during a forensic review of unusual outbound activity. Once identified, we secured the account, launched an internal investigation, and reviewed administrative access across the platform. Our review found that the compromised account had been mistakenly granted global Zimbra administrative access during onboarding. We have corrected this and tightened controls. There is no evidence that inbox contents or personal messages were accessed or exported. No password data was extracted by the attacker. The attacker was able to obtain a list of hosted email addresses with first and last names. We believe this is the source of the recent increase in phishing emails that impersonate XMission and some customers. In a small number of cases, the attacker set up unauthorized mail forwarding rules on individual mailboxes. Those rules have been removed. We will notify any affected customers directly. What happened * July 11: a phishing email from a lookalike domain was opened by a new employee. * The account had unnecessary global administrative access, which exposed account metadata (email addresses and names). * July 30: mail administrators detected and contained the breach during a forensic review. * We secured the account, audited admin activity, and began a broader security review. What we are doing now * Mandatory 2FA for all global administrative roles and a full review of privileged access. * Additional monitoring, rate limiting, and scanning on authenticated email flows. * Process changes so non-technical roles do not receive elevated permissions. Our path forward: introducing iRedMail For more than a year we have been preparing a new shared email hosting platform based on iRedMail Enterprise Edition. It is modern, secure, and built on open standards. The recent incident reinforced why this move makes sense for our customers. iRedMail gives us stronger security controls, faster updates, and direct control over system changes. We are accelerating the rollout. Migrations will begin soon and complete by Q4 2025. We will coordinate with each customer ahead of time to ensure a smooth transition and uninterrupted service. What will change * New webmail experience and hostnames. The current zimbra.xmission.com login will be replaced. We will send the new login details before your migration window. * For @xmission.com mailboxes: iRedMail with Roundcube webmail (email, POP, IMAP). * For business domains: iRedMail with SOGo webmail (email, POP, IMAP, ActiveSync, calendars, contacts, shared folders). * Stronger phishing and spam protections, and more frequent security updates. What you should do now * Treat emails that urge immediate action with caution. Do not click links if you are unsure. * If a message claims to be from XMission, verify by logging in directly through our website or your control panel, not through email links. * Report suspicious messages by marking them as spam or forwarding them to spam(a)xmission.com. * If you believe an account has been tampered with, change the password and contact our support team. For customers who need Zimbra We understand some customers rely on Zimbra’s collaboration features. We will offer dedicated, isolated Zimbra virtual machines in our data center for those needs. These will be managed and priced based on resources. We will provide details in advance. We take the protection of your data seriously. We regret this incident and have addressed the root causes. Our team is available 24/7 to answer questions and help secure your domain. [ https://survey.xmission.com/ | Our survey ] · [ https://bsky.app/profile/xmission.bsky.social | Bluesky ] · [ https://www.facebook.com/XMissionInternet | Facebook ] · [ https://bsky.app/profile/xmissionstatus.bsky.social | XM Status ] · [ https://status.xmission.com/ | System Status ]

1 0

[Announce-email] Security notice and upcoming improvements to XMission email
by John Richey 13 Aug '25

13 Aug '25

Email from XMission Security notice and upcoming improvements to XMission email On Monday, July 11, XMission experienced a breach involving our hosted Zimbra email system. A highly targeted phishing email compromised the account of a recently hired staff member. The breach was identified on July 30 during a forensic review of unusual outbound activity. Once identified, we secured the account, launched an internal investigation, and reviewed administrative access across the platform. Our review found that the compromised account had been mistakenly granted global Zimbra administrative access during onboarding. We have corrected this and tightened controls. There is no evidence that inbox contents or personal messages were accessed or exported. No password data was extracted by the attacker. The attacker was able to obtain a list of hosted email addresses with first and last names. We believe this is the source of the recent increase in phishing emails that impersonate XMission and some customers. In a small number of cases, the attacker set up unauthorized mail forwarding rules on individual mailboxes. Those rules have been removed. We will notify any affected customers directly. What happened * July 11: a phishing email from a lookalike domain was opened by a new employee. * The account had unnecessary global administrative access, which exposed account metadata (email addresses and names). * July 30: mail administrators detected and contained the breach during a forensic review. * We secured the account, audited admin activity, and began a broader security review. What we are doing now * Mandatory 2FA for all global administrative roles and a full review of privileged access. * Additional monitoring, rate limiting, and scanning on authenticated email flows. * Process changes so non-technical roles do not receive elevated permissions. Our path forward: introducing iRedMail For more than a year we have been preparing a new shared email hosting platform based on iRedMail Enterprise Edition. It is modern, secure, and built on open standards. The recent incident reinforced why this move makes sense for our customers. iRedMail gives us stronger security controls, faster updates, and direct control over system changes. We are accelerating the rollout. Migrations will begin soon and complete by Q4 2025. We will coordinate with each customer ahead of time to ensure a smooth transition and uninterrupted service. What will change * New webmail experience and hostnames. The current zimbra.xmission.com login will be replaced. We will send the new login details before your migration window. * For @xmission.com mailboxes: iRedMail with Roundcube webmail (email, POP, IMAP). * For business domains: iRedMail with SOGo webmail (email, POP, IMAP, ActiveSync, calendars, contacts, shared folders). * Stronger phishing and spam protections, and more frequent security updates. What you should do now * Treat emails that urge immediate action with caution. Do not click links if you are unsure. * If a message claims to be from XMission, verify by logging in directly through our website or your control panel, not through email links. * Report suspicious messages by marking them as spam or forwarding them to spam(a)xmission.com. * If you believe an account has been tampered with, change the password and contact our support team. For customers who need Zimbra We understand some customers rely on Zimbra’s collaboration features. We will offer dedicated, isolated Zimbra virtual machines in our data center for those needs. These will be managed and priced based on resources. We will provide details in advance. We take the protection of your data seriously. We regret this incident and have addressed the root causes. Our team is available 24/7 to answer questions and help secure your domain. [ https://survey.xmission.com/ | Our survey ] · [ https://bsky.app/profile/xmission.bsky.social | Bluesky ] · [ https://www.facebook.com/XMissionInternet | Facebook ] · [ https://bsky.app/profile/xmissionstatus.bsky.social | XM Status ] · [ https://status.xmission.com/ | System Status ]

1 0

[Announce-email] Zimbra Mailbox Service Fully Restored
by XMission Support 20 Jun '25

20 Jun '25

[ http://xmission.com/ ] Dear valued customer, We’re pleased to inform you that the recent Zimbra mailbox outage has been fully resolved. All affected mailboxes have now been successfully restored and are back in full operation. What happened: A critical hardware failure occurred on the morning of June 10th, involving multiple simultaneous drive failures on one of our primary mailbox servers. Despite having redundancy in place, the extent of the failure made recovery impossible, requiring the rapid deployment of a new server and a full restore from backup. What we did: * Provisioned a new production server * Restored over 2,000 mailboxes from backup * Verified data integrity and incoming mail delivery Rebalanced services across the Zimbra mail cluster to ensure stability What to expect: All mailboxes should now be accessible. Any mail that was delayed during the outage has been queued and delivered. No mail has been lost. If you encounter any lingering issues or missing data, please don’t hesitate to contact us directly so we can investigate. We deeply appreciate your patience during this process. Outages of this nature are extremely rare, and we’re taking additional steps to review and strengthen our email systems moving forward. We're also excited to continue providing hosted email service as we transition to new infrastructure and technologies in the near future, with the goal of delivering even greater tability, performance, and customer experience. Sincerely, XMission Support [ https://mailman.xmission.com/postorius/lists/announce-email.mailman.xmissio… | Unsubscribe here ] [ http://survey.xmission.com/ | ★ ] [ http://survey.xmission.com/ | Our survey ] [ https://twitter.com/xmission | t ] [ https://twitter.com/xmission | Twitter ] [ https://facebook.com/XMissionInternet | f ] [ https://facebook.com/XMissionInternet | Facebook ] [ https://status.xmission.com/ | ··· ] [ https://twitter.com/xmissionstatus | Status ]

1 0

[Announce-email] Mail Routing Outage
by XMission Support 19 Mar '21

19 Mar '21

XMission Internet · Connections // Hosting // Voice <http://www.xmission.com> Mail Routing Outage XMission experienced a major mail routing outage starting at 8:58 A.M. MST which did not fully resolve until approximately 10:50 A.M. Starting at 9:20 A.M. routing was mostly resolved but some mail customers may have had intermittent service with improvements kicking in around 10:00 A.M. All services were restored to standard operational levels by 10:50 A.M. In summary, one of our redundant mail routing servers became unresponsive. Human error resulted in the functioning mail routing server being restarted my mistake, thus halting all mail routing until it could properly re-establish routes. Technical Details For many years XMission's sophisticated email infrastructure has used the resilient and robust LVS (Linux Virtual Server) <http://www.linuxvirtualserver.org/HighAvailability.html> cluster to provide high availability for mail routing. It works incredibly well but when it goes down entirely it can be difficult to get everything nicely re-established under heavy load. ------------------------------------------------------------------------ ★ <http://survey.xmission.com/> Our survey <http://survey.xmission.com/> *t* <https://twitter.com/xmission> Twitter <https://twitter.com/xmission> *f* <https://facebook.com/XMissionInternet> Facebook <https://facebook.com/XMissionInternet> *···* <https://status.xmission.com> Status <https://twitter.com/xmissionstatus> XMission Announcement

1 0