|
Oh no, Mailchimp got hacked! It's reported that data from about 100 customers has been stolen, and we don't know if any of them are major customers. I wonder if my information has been stolen! Mailchimp is an email sender that many small and medium-sized e-commerce businesses like to use. At the same time, it can send more than 2,000 emails, and it's very convenient for customer service with its email formatting options.
Mailchimp has confirmed the breach to the media, and the vulnerability was exposed when users of Trezor hardware cryptocurrency wallets reported being targeted by sophisticated phishing emails. On March 26, when the company discovered that the tools used by its customer support and account management teams had been unauthorized accessed, they became aware of the breach. Smyth stated, "Despite Mailchimp ceasing to use the affected staff accounts once the vulnerability was known, hackers were still able to access approximately 300 Mailchimp user accounts and obtain audience data from 102 of those accounts."
So far, Mailchimp's analysis suggests that the attacker was primarily after data related to cryptocurrency and financial users. Unfortunately, for Trezor users and customers of other data breach organizations, a skilled threat actor now knows their email contact information and may be aware of the cryptocurrency hardware and software they use. Trezor device users have been advised to report any new online phishing attempts directly to security@trezor.io. Mailchimp has stated that owners of other affected accounts have been notified, so more notifications for affected entities should be coming soon.
It's not clear yet whether the hackers have full control over users' cryptocurrency wallets, and whether any funds of Trezor users have been stolen. |
|