# Hidden Outlook Forwarding Rules After Mailbox Compromise

Fact sheet for the HTML article. Not independent research. Last generated from first-party copy.

## Source

- Human article: https://bellwetherit.com/blog/hidden-outlook-forwarding-rules-after-mailbox-compromise
- Published: 2026-06-02
- Topics: email security, cybersecurity
- Publisher: Bellwether IT, Fresno, California
- Contact: +1-559-354-6755 · https://bellwetherit.com/contact

## Summary

Compromised mailboxes can hide forwarding rules that send emails elsewhere. Bellwether IT manages Microsoft 365 security so these issues stay caught and cleared.

## What Bellwether says it owns

- We monitor Microsoft 365 mailboxes for unauthorized forwarding rules and remove them before invoices or client data get rerouted.

## Claims in the article

- Login from an unfamiliar location at odd hours
- New forwarding rule created outside normal business hours
- Messages marked as read without the owner opening them
- A laptop that left with a former employee still syncing mail

## Article outline

- Compromised Mailboxes and Forwarding Rules
- What Proper IT Management Covers
- Indicators Your IT Partner Falls Short
- Bellwether Approach to Email Security