What should I do if I believe my Polyosync account has been compromised?
If you believe an unauthorized person has gained access to your Polyosync account, act promptly to protect your account and business environment.
A compromised account may expose information or allow actions within the permissions assigned to that user.
Immediate actions
1. Open the official Polyosync website directly rather than following suspicious links.
2. If you can still access your account safely, change your password through the supported account management process.
3. Use a new, unique password that has not been used on another service.
4. If the same password was used elsewhere, change it on those services as well.
5. Notify an authorized administrator if your account belongs to a business organization.
6. Review recent changes to business resources where the relevant information is available.
7. Contact Polyosync Support and report the suspected compromise.
What if I cannot sign in?
Use the available account recovery process.
If recovery does not work, contact Polyosync Support and explain that you suspect unauthorized access.
Do not create additional accounts to bypass existing access restrictions.
What if the compromised account has administrative privileges?
Notify the organization's responsible administrator or security contact immediately.
Administrative access may allow changes to employee permissions, integrations, and other sensitive configurations.
The organization should assess which resources may have been affected.
What if external integrations are connected?
Review the connected external accounts.
If there is evidence that an integration credential may have been exposed, follow the external provider's credential revocation or rotation process.
What about AI Employees and automated workflows?
Review unexpected configuration changes and recent executions.
If a suspicious workflow could continue performing actions, an authorized administrator should consider pausing or disabling the affected operation using the available controls.
What should I avoid?
Do not share your password with anyone claiming to investigate the incident.
Do not send authentication tokens or API keys through ordinary support messages.
Do not delete potentially relevant evidence before the situation has been reviewed.
Does a failed login mean the account was compromised?
Not necessarily.
Login failures can also result from incorrect credentials, expired sessions, or account configuration issues.
Summary
Secure your credentials, notify the appropriate administrator, review potentially affected resources, and report the incident promptly.