msboc wrote:
Carbonite sent me the message.
I don’t expect your Mac was hacked here. I suspect a source of confusion — a misfeature — of Carbonite itself.
Geolocating IP addresses is best assumed to be accurate within the same country.
Better geolocation accuracy costs the ISPs more money, and providing that better accuracy puts people at risk.
Which means IP addresses routinely geolocate tens or hundreds of kilometers away from the user. Or more.
If the reported login happened around the same time as one of your logins or other activity of yours, you’re likely just fine as the login was from you.
If the login does not match a time when you accessed the Carbonite service, you will want to take whatever steps Carbonite recommends to re-secure your login on their service. That may well involve two-factor authentication or passkeys, or whatever Carbonite uses.
TL;DR: Contact Carbonite Support for concerns or issues with messages generated by Carbonite. (Here assuming the message itself isn’t spoofed, too.)