Suspicious Email - Deactivation due to inactivity

[Esther Lawrence]

Hello, 

I received an email from Atlassian stating that I hadn't used my Jira app in a while and would need to login to avoid deactivation. 

I thought the email was strange as I regularly use Jira on both the app and the desktop. Due to this I reported the email to my security team.

However I wanted to check if this did come from Atlassian and if so why I am receiving this message? It's really important that our account is not deactivated for any reason. 

Best, 

Esther

[Evgenii]

Hi, @Esther Lawrence 

Reporting it to your security team first was exactly the right move. What is worth knowing:

Yes, Atlassian does send legitimate emails like this. Atlassian accounts that haven't been used for an extended period get an inactivity notice before deactivation. So the email type itself is real, not automatically phishing.

Why you'd get one while actively using Jira: the inactivity check applies to a specific Atlassian account (email address), not to you as a person. Maybe you occasionally created one more atlassian instance using your email. It's a very common situation.

How to verify safely, without clicking anything in the email:

1. Check the sender domain and have your security team look at the headers (SPF/DKIM). Legitimate Atlassian notices come from atlassian.com domains.
2. Open a browser manually and go to id.atlassian.com, log in with the address the email was sent to. If the account is active and works, you've satisfied the "log in" requirement anyway, with zero risk.
3. If anything still looks off, raise a ticket at support.atlassian.com (as @Arkadiusz Wroblewski suggested) and attach the email with headers, Atlassian can confirm whether it originated from them.

One reassurance: even if an unused account did get deactivated, deactivation of a personal Atlassian account doesn't delete your organization's Jira site or data, and accounts can be reactivated by logging in or via an admin.

[Arkadiusz Wroblewski]

Yep, shadow accounts/orgs created by mistake that are firing are mostly what I've seen in the past.

[Arkadiusz Wroblewski]

Hello @Esther Lawrence 

Please Open an Ticket under support.atlassian.com 

We are community members and cannot really answer that.

Yes, overall these emails are mostly legitimate, but you should clarify with support why you are getting these emails even when you are active.

Best,

Arek 🤠