A shared ISP email platform became the pressure point in a reported cyberattack, showing how one software flaw can turn routine mailbox infrastructure into a large-scale identity risk.