Comments added on my name, while I was not even logged in to Smartsheet

Nazire

There is a comment added on my smartsheet. Looks as if entered by me and it shows my name as the user and my name as the commenter. I checked the logs, and the comments.

There is no way I entered that message, and there is no way I logged into system at the time at which I was even sleeping.

How can this happen, what might have happened? Can someone impersonate my as user and add comments on my behalf?

Thanks,

Nazire

jmyzk_cloudsmart_jp

@Nazire

One possible cause is that someone got access to your API token.😅

Then, the person can add comments as you.

https://smartsheet.redoc.ly/tag/comments#operation/comments-create

{

• "message": "SUCCESS",
• "resultCode": 0,
• "result": {
• "attachments": [],
• "createdAt": "2019-08-24T14:15:22Z",
• "createdBy": {
• "email": "jane.doe@smartsheet.com", <-- If someone creates a comment with your token, this becomes you.
• "name": "Jane Doe"
• },
• "discussionId": 0,
• "id": 0,
• "modifiedAt": "2019-08-24T14:15:22Z",
• "text": "string"
• }

}

Genevieve P.

Hey @Nazire

Other than the API, if someone has your email and password they would be able to login as you and enter a comment.

Another potential explanation could be timezone set in your Account settings is different than your current timezone. This may show a different date/time in your sheets.

Let us know if any of this helped!

Cheers,

Genevieve