Mail: Notice of Data Breach at Teachable (formerly Fedora)

[twcm]

Goedeavond,

kent iemand onderstaande mail?

==================

Dear Thomas Manders,
We are writing to inform you of a suspected data breach involving accounts created between September 17, 2013 and November 21, 2015. We have reason to suspect that personal information related to accounts on Edurila (joined 2014-09-03) may have been compromised. This includes the email addresses and passwords associated with the school's Teachable (formerly Fedora) account.
As a precaution we are enforcing password resets for potentially affected users.
You can reset your password here: https://sso.teachable.com...ble_accounts/password/new
If you happen to use this password with any other service, we highly recommend updating your password there as well.
We apologize for the inconvenience, and thank you for your understanding in helping us keep Teachable safe.
Team Teachable

==================

Hieronder de headers.
NB: Mijn naam is vervangen door "mijn.email"

klopt deze formulering: "permitted sender) smtp.mailfrom="bounce+99ef0b.b6ea9-mijn.email=[e-mail]""
ik heb het gevoel dat dit zo niet klopt...

==================

Delivered-To: [e-mail]
Received: by 2002:a1f:a18b:0:0:0:0:0 with SMTP id k133csp10488868vke;
Thu, 6 Dec 2018 11:02:17 -0800 (PST)
X-Google-Smtp-Source: AFSGD/WK65PjRhE6A6+RfAI0uK3mF6Ut0zZ+ScwsHK0D5SXagzL9/yHKGgyyufdt9duksrrANnJo
X-Received: by 2002:a0c:e189:: with SMTP id p9mr28199044qvl.68.1544122937206;
Thu, 06 Dec 2018 11:02:17 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1544122937; cv=none;
d=google.com; s=arc-20160816;
b=aFT5TsGPhmmbPp2UWPyUM4AmffSr7d7zlE+x6Pf3LeYaMszGB8cXD9Md+cx5foC1si
PacIl8Lpb+qW2RPFV/VAz3Ib8S/XaA1jiYy5/7T594E/RKQoax3qL8GyNVOxlYWi8R0J
lPx/5q1oBR3tZzhb6tqVMKvCOjloD4QNoAKlkX+GCcqjDoUyRe2sw5jvB3nPF6egO9Y+
GFL9bAyyH1lybaIYkk97spsazzx8G5QSx/6b4sNYlLSLkdym/B8xbUMhZ6uVbyi2WT8V
e8u3wDzQVpTgcBpBqBjHQNjyk3YuJBvyAadpCBjkcqeJMl0ThQTb1EUKsSyClIJVcN58
RVkQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-transfer-encoding:to:message-id:mime-version:subject:from
:sender:date:list-id:dkim-signature:dkim-signature;
bh=dx9XUlpYjUPorpA0tGArFrgBTSpHvXZ55SbceylYZZ8=;
b=jlpQ2nVs9KOA51DKeFFfJgRTgf8kyFpoZ69xoNElcyZjKHqoBtKxZxSURQyPngIoBe
JW/ON6ZslWyxoQShw1dL1P9kTGSPYWJaLr2HjvJXyhiGFsZxev35BR5ODFcOh3IeDAOW
24tt8whDJSH/hCIwz7p2ZWsHUzUj5a7g9lEL0QTW9KI4AO7VrkQvVHvgjA7H31zAZJih
mu7QicXiqZEjDeBLZCipEKCd3jA86L2ATQbjxtKcyWJFWWjWM22d/+wYNF/WH9K342w8
nM2LFVLt9sXzEq18J10QbkufucMQ9lOLv7Fshm9GZkIWrOc0l1ImtUpD75ickOEJ1opP
6hkg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@m.teachable.com header.s=krs header.b=FTErM3Bj;
dkim=pass header.i=@mailgun.org header.s=mg header.b=N5YwliQL;
spf=pass (google.com: domain of bounce+99ef0b.b6ea9-mijn.email=[e-mail] designates 69.72.33.241 as permitted sender) smtp.mailfrom="bounce+99ef0b.b6ea9-mijn.email=[e-mail]";
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=m.teachable.com
Return-Path: <bounce+99ef0b.b6ea9-mijn.email=[e-mail]>
Received: from m33-241.mailgun.net (m33-241.mailgun.net. [69.72.33.241])
by mx.google.com with UTF8SMTPS id x24si741022qkh.97.2018.12.06.11.02.17
for <[e-mail]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 06 Dec 2018 11:02:17 -0800 (PST)
Received-SPF: pass (google.com: domain of bounce+99ef0b.b6ea9-mijn.email=[e-mail] designates 69.72.33.241 as permitted sender) client-ip=69.72.33.241;
Authentication-Results: mx.google.com;
dkim=pass header.i=@m.teachable.com header.s=krs header.b=FTErM3Bj;
dkim=pass header.i=@mailgun.org header.s=mg header.b=N5YwliQL;
spf=pass (google.com: domain of bounce+99ef0b.b6ea9-mijn.email=[e-mail] designates 69.72.33.241 as permitted sender) smtp.mailfrom="bounce+99ef0b.b6ea9-mijn.email=[e-mail]";
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=m.teachable.com
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=m.teachable.com; q=dns/txt;
s=krs; t=1544122937; h=Content-Transfer-Encoding: To: Message-Id:
Mime-Version: Content-Type: Subject: From: Sender: Date: List-Id:
X-Feedback-Id; bh=dx9XUlpYjUPorpA0tGArFrgBTSpHvXZ55SbceylYZZ8=; b=FTErM3BjVr8kBgRAgsbybvIzB0KzazFf9VXA/df5EFUpEy+MF/dc7nqYkjZIdTG+5TGDzKGc
wNX53fYDqrrsnhD/WKqP8MamaKNJFKEpxv3qHzhHlSROHInviFVVqOPIfiJl5L37r5HE5zq7
oiwE9yZU4hcCQlicVuVVs37vWBU=
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=mailgun.org; q=dns/txt; s=mg;
t=1544122937; h=Content-Transfer-Encoding: To: Message-Id:
Mime-Version: Content-Type: Subject: From: Sender: Date: List-Id:
X-Feedback-Id; bh=dx9XUlpYjUPorpA0tGArFrgBTSpHvXZ55SbceylYZZ8=; b=N5YwliQLa4DVSFSoKTwEnLznJefGFQtWXuU+py1dm8xNx7D4jZpR+k6hZvp3t4ADhtpFvTEP
z9pw0fcWjgOaDB1H2HxgrMNRX9tFpIcaufRceMs2d70XopX7T+3dKoR+n+jsQtG76Qjjz/sR
qdbLf46ROH1lBbPEm153KPbivqU=
X-Feedback-Id: 5707cc0e0e6fc4c3bef86dc2:mailgun
X-Mailgun-Sending-Ip: 69.72.33.241
X-Mailgun-Sid: WyI3ODJmNCIsICJ0aG9tYXMubWFuZGVyc0BnbWFpbC5jb20iLCAiYjZlYTkiXQ==
Received: by luna.mailgun.net with SMTP X-Mailgun-List-Id=7728335,
8766972694897; Thu, 06 Dec 2018 19:02:17 +0000
X-Mailgun-List-Id: 7728335
X-Mailgun-List-Address: [e-mail]
List-Id: <security-1.m.teachable.com>
Received: by luna.mailgun.net with HTTP; Thu, 06 Dec 2018 17:27:38 +0000
Date: Thu, 06 Dec 2018 17:27:38 +0000
Sender: [e-mail]
From: [e-mail]
Subject: Notice of data breach at Teachable (formerly Fedora)
Content-Type: text/html; charset="ascii"
Mime-Version: 1.0
Message-Id: <[e-mail]>
To: Mijn Email <[e-mail]>
Content-Transfer-Encoding: quoted-printable

==================

Tot op heden kan ik niets vinden mbt deze mail, ook niet als scam/hoax/phishing.

[Jester-NL]

Header ziet er redelijk uit. Ze gebruiken geen dmarc, maar dat is nog lang niet overal gemeengoed.
Ben je bekend met (en bij) die club?

En pas je naam even aan in de begroeting van de mail, daar staat ie voluit

[F_J_K]

Als het even kan nooit een link in een mail aanklikken. Ga zelf naar de site en reset je password zelf. Ongeacht of het een valide mail is of niet, is dat beter..