Engage - Tracking Reported Phishing Emails After User Clicks or Submits Data - Jul 2025

Service Update

Availability	July 14th, 2025
Product(s)	Engage, Email Security Cloud Gateway (CG) Engage, Email Security Cloud Integrated (CI)
Who's affected	All existing and Net-New Engage customers

Overview

Mimecast is excited to announce a new feature for Engage customers that enhances the tracking of simulated phishing email reports. With this update, administrators can now see if users report simulated phishing emails, regardless of any other actions taken, such as clicking links or submitting credentials. Each reporting action is recorded with a precise date and time stamp, which appears in the phishing campaign CSV export and is also available via API.

What's changing

• Administrators can now see when users report simulated phishing emails, even if those users have already clicked a link or submitted credentials in the simulation. The exact date and time of each reporting action will be included in the phishing campaign CSV export and will also be available via API.

Why is this important?

• This update provides administrators with enhanced visibility and more accurate tracking of user-reported phishing emails, independent of other user actions. It supports better compliance reporting and reinforces the importance of reporting phishing emails, regardless of whether a user interacted with the simulation.

Key details:

• No changes to the user interface.
• Time-stamped reporting data is now available in both CSV exports and via API.
• Enables comprehensive monitoring of user engagement and response to phishing simulations.
• This feature empowers administrators to analyze and encourage positive security behaviors across their organization, supporting a stronger security posture and improved compliance reporting.

Recommended actions

Regularly export phishing campaign reports or use the API to access new time-stamped data on reported simulated phishing emails. Use this enhanced visibility to strengthen compliance reporting and reinforce the importance of reporting phishing emails, regardless of other user actions.