Dear colleagues, We have published a report detailing the findings of an investigation into an attempt to defraud the registry. The report is available at: https://www.ripe.net/support/documentation/disclosures-and-reports/ripe-ncc-... In recent months, we have uncovered an unusual pattern of incidents concerning unauthorised access to certain LIR accounts. Attempts were made to gain access to resources through fraud and to transfer resources without authorisation from the legitimate holders. Following an investigation, the unauthorised transfers were reverted and the membership of the party submitting fraudulent documents has been terminated. We, therefore, encourage our members to work with us to ensure the security of your resources and to report any suspicious activity concerning your accounts. We recommend the following measures: - Be vigilant about the validity of your email domains and email security. - Ensure that all contacts in your LIR account are valid and kept up to date. - Report any suspicious activity to us immediately. - Store account credentials in a secure manner, and stop using shared accounts. Kind regards, James Kennedy Chief Registry Officer RIPE NCC