An Inventry system sending notifications of guests who haven't signed in

[timbo343]

This is an interesting one with Inventry notifications. So...

 

One of our headteachers is receiving emails to their [email protected] email address however they have had 3 emails on Friday 16th May 2025 at 7:58, 8:24 and 12:55 to say visitors were in the school reception area yet were not actually in reception, they had not even signed in on the school system yet the headteacher got 3 emails to say they had!

 

All 3 sign in events are not logged on the Inventry system at the primary school we thought they would be logged in at and I've checked with all the other schools (one to check tomorrow) in the trust in case there might have been a mistake with email address notifications. Not one of our schools has had these visitors in at these times. I'm concerned there is another system out there in the wild that is using our headteacher's email address.

 

If this is the case and given that there is no identification what so ever on the emails that state a visitor has signed in, we are very much in the dark about this. The headers do not show anything either.

 

I would have thought each inventry system would have at least it's 4 digit ID number in the body of the email notification so if something like this was to ever crop up, the emails could be traced back to the system that generated the email.

 

The location in the email states Location: 1 yet a legit email that the school we thought the visitors were visiting states Location: Main Reception.

 

Could this be a data protection issue on Inventry's part?

[PotNoodleTech]

Could it be a third party disguising emails to look like your sign in system?  "Click here if you do not recognise this visitor and download this PDF witha virus in it"

 

If so that's pretty worrying.

 

Have you reported it to Inventry?

[NegativeKillDeath]

You say "had these visitors in at these times" which suggests you are aware of the visitors, maybe old emails coming through from previous visits?

[timbo343]

All the headers check out comparing the headers to an original and these rogue visitors.

 

I've reported it to Inventry but they couldn't grasp the issue until I followed it up in an email.

[timbo343]

51 minutes ago, NegativeKillDeath said:

You say "had these visitors in at these times" which suggests you are aware of the visitors, maybe old emails coming through from previous visits?

 

We dont have these visitors on any of our systems - yet to speak to the last school. There is no record of them signing in across the trust.

[timbo343]

Mystery solved - spoken to the last of our schools - the error is on that system.