Hello, team,
Received notification that a user who did not send the invitation, was added to the team with access to products. Already taken steps to change the password, enable two-factor authentication and delete the user. But the question remains - how could this happen?