Ticket#3580670/STONEHENGE/Subject: SonicWall Credential Review Finding Stonehenge-Murano TZ470 -- has been updated - user@withoutemail.com

This ticket has been updated by Jennifer McDonnell jenniferm@stonehenge.bz

Jennifer McDonnell

7/7/2026 6:13 PM

Summary:

Subject: SonicWall Credential Review Finding Stonehenge-Murano TZ470

Status:

Waiting-Client

Ticket #

3580670

Company:

Stonehenge Advisors, Inc

Contact:

Dan Sablosky (POC)

Phone:

(215) 320-3777

Address:

4328-42 Ridge Avenue
Suite 104
Philadelphia, PA 19129

View Ticket

Discussion

Jennifer McDonnell

7/7/2026 6:13 PM-

Thank you!! We were worried.

Jennifer McDonnell
Regional Property Manager
Stonehenge Advisors Inc.
215-561-9420

Luis Montenegro

7/7/2026 2:52 PM-3:20 PM

Good afternoon,

Thanks for reaching out, and apologies for the confusion. I tried calling to walk through this and missed you, so here is the explanation.

The email refers to the SonicWall firewall at your office. "kgriffin" is a local login account that was stored on the firewall itself, likely created some time ago and left in place. It does not need to match a current staff member. These accounts can linger on the hardware for years after they were first set up.

Our recent security review found that this account's credentials were exposed, so the recommendation was to remove it. Since the account is not in use and no one there recognizes it, I have removed it from the firewall. No action is needed on your end.

There are no signs of any unauthorized access to your systems. This was a cleanup item to close out the finding.

Please let me know if you or Dan have any questions.

Regards,

Luis Montenegro
Atlantic Tomorrow's Office

Jennifer McDonnell

7/7/2026 11:55 AM-

All what is this about below?? Who is K Griffin?? I am the Manager of Murano & Dan (company owner) asked me what this is about, but we have no KGriffin here. Can you please explain what this is about?

Jennifer McDonnell
Regional Property Manager
Stonehenge Advisors Inc.
215-561-9420

From: Daniel Sablosky <dan_s@stonehenge.bz>
Sent: Monday, July 6, 2026 4:07 PM
To: Jennifer McDonnell <jenniferm@stonehenge.bz>
Subject: FW: Subject: SonicWall Credential Review Finding Stonehenge-Murano TZ470

Jennifer,
Can you call and find out what this is about. Who is Kgriffin?

Daniel A. Sablosky
President
Stonehenge Advisors Inc.
4328 Ridge Avenue
Unit 104
Philadelphia PA 19129
Mobile: 215.651.0678
Office: 215.320.3777
Fax: 215.320.3776
[Graphical user interface Description automatically generated]

[Graphical user interface Description automatically generated]

CONFIDENTIALITY NOTICE: The information contained in this electronic mail message and in all attachments hereto is confidential, privileged and/or proprietary and is intended for the exclusive use of the addressee(s). If you are not an intended addressee of this message your interception, copying, distribution, disclosure or other use of this message, any attachment or the information contained therein is prohibited and any prohibited use may subject you to criminal and civil penalties. If you received this message and are not an addressee hereof, immediately notify the sender by return e-mail or by telephone at (215) 320-3777 and destroy every electronic, paper, and other copy of this message and all attachments hereto and every digest or other summary of the information contained herein or in any attachment.

From: Luis Montenegro <lmontenegro@tomorrowsoffice.com>
Sent: Monday, July 6, 2026 3:50 PM
To: Daniel Sablosky <dan_s@stonehenge.bz>
Cc: Atlantic IT Support <atlanticitsupport@tomorrowsoffice.com>
Subject: Subject: SonicWall Credential Review Finding Stonehenge-Murano TZ470

To Whom It May Concern,

As part of our ongoing proactive maintenance and SonicWall credential review process, we identified a finding on the Stonehenge-Murano TZ470 firewall that requires attention.

The audit flagged a local firewall user password entry associated with the following account:

- kgriffin

While this finding does not confirm unauthorized access by itself, we recommend reviewing and remediating this item to reduce potential credential exposure risk and maintain proper firewall security hygiene.

We would like to take the following actions:

Reset the affected local firewall user password.
Review whether the affected local account is still required.
Disable or remove the account if it is no longer needed.
Review recent firewall authentication and VPN logs for any unusual activity.
Confirm whether this credential may have been shared, reused, or stored outside of approved systems.

Please confirm approval for us to proceed with the recommended remediation steps. If this account is still required for business operations, please let us know so we can preserve access while resetting the credential securely.

We will continue reviewing the firewall audit findings and provide an update if we identify any indicators of unauthorized access or additional risk.

Regards,

Luis Montenegro
Atlantic Tomorrow's Office
Luis****Montenegro
NOC Off Hours Manager

Network Operations Center
[phone_icon.png]

(212) 507-9420
[email_icon.png]

lmontenegro@tomorrowsoffice.com
[website_icon.png]

tomorrowsoffice.com
Contact us for support:
Print Support |IT Support |CRM/ERP Support

[

](https://onclickscan.trustifi.com/api/o/v1/scan/link/fff3f6/305718/6ec20d/be3bea/5f1344/159731/a5c691/92ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/838028/c066d9/d2cfa2/eda954/7047c2/c78ca0/a64c51/a70b41/3b8cb9/a58546/1ed879/608ea1/99e8a0/c541c0/d47551/8e1e31/9d696c/2a574e/fa3b03/367c4d/3b5978/676b48/aa8950/83bfea/03f2e4/3528c1/9a2e0e/e58f4a/e8dde9/3f5296/907...

Luis Montenegro

7/6/2026 3:50 PM-

To Whom It May Concern,

As part of our ongoing proactive maintenance and SonicWall credential review process, we identified a finding on the Stonehenge-Murano TZ470 firewall that requires attention.

The audit flagged a local firewall user password entry associated with the following account:

- kgriffin

While this finding does not confirm unauthorized access by itself, we recommend reviewing and remediating this item to reduce potential credential exposure risk and maintain proper firewall security hygiene.

We would like to take the following actions:

Reset the affected local firewall user password.
Review whether the affected local account is still required.
Disable or remove the account if it is no longer needed.
Review recent firewall authentication and VPN logs for any unusual activity.
Confirm whether this credential may have been shared, reused, or stored outside of approved systems.

Network Operations Center
[phone_icon.png]

(212) 507-9420
[email_icon.png]

lmontenegro@tomorrowsoffice.com
[website_icon.png]

tomorrowsoffice.com
Contact us for support:
Print Support | IT Support | CRM/ERP Support

The information contained in this message and any attachments,which may be proprietary and/or confidential to Atlantic, Tomorrow’s Office, isonly for use of the intended recipient(s). If you are not the intendedrecipient(s), any interception, use, disclosure, dissemination, distribution orcopying is strictly prohibited and may subject you to criminal and/or civilpenalties. If you received this message in error, please immediately notify thesender via email and destroy and/or delete, from your system(s), all copies ofthis message and any attachments. The sender is not liable in any way for:improper or incomplete transmission or delayed receipt of this message; ordamage to your system from this message.

[image]

View Ticket