diff --git a/cron/auth02mozdef.py b/cron/auth02mozdef.py
index 7191e2f1..913ea4c4 100644
--- a/cron/auth02mozdef.py
+++ b/cron/auth02mozdef.py
@@ -265,7 +265,7 @@ def process_msg(mozmsg, msg):
     details = DotDict({})
     # defaults
     details.username = "UNKNOWN"
-    details.userid = "UNKNNOWN"
+    details.userid = "UNKNOWN"
 
     # key words used to set category and success/failure markers
     authentication_words = ['Login', 'Logout', 'Auth']