{"id":476999,"date":"2023-01-19T12:08:46","date_gmt":"2023-01-19T10:08:46","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=476999"},"modified":"2023-01-19T12:10:23","modified_gmt":"2023-01-19T10:10:23","slug":"mailchimp-hacked-for-second-time-in-a-year","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/476999-mailchimp-hacked-for-second-time-in-a-year.html","title":{"rendered":"Mailchimp hacked for second time in a year"},"content":{"rendered":"

Email marketing company Mailchimp has confirmed<\/strong><\/a> it suffered a second hacking incident in less than a year.<\/p>\n

Mailchimp’s security team identified an unauthorised actor accessing one of the tools used by the company’s customer-facing teams for customer support and account administration on 11 January 2023.<\/p>\n

Its investigations found that the unauthorised actor conducted a social engineering attack on Mailchimp employees and contractors.<\/p>\n

These types of attacks use manipulation via phone calls, texts, or emails to convince a target that they must share details that could lead to sensitive accounts or systems being accessed.<\/p>\n

Two of the most high-profile cases where this technique was used were the 2022 hackings of Uber and Rockstar Games, both of which were supposedly carried out by a 17-year-old teenager from the UK.<\/p>\n

An intruder previously accessed 214 Mailchimp accounts through a social engineering attack in March 2022. The company only acknowledged the incident in August 2022.<\/p>\n

133 more accounts exposed in latest breach<\/h2>\n

In the latest attack, the hackers obtained access to “select” Mailchimp accounts using employee credentials compromised through the same technique.<\/p>\n

“Based on our investigation to date, this targeted incident has been limited to 133 Mailchimp accounts,” the company said.<\/p>\n

Mailchimp stated there was “no evidence” that the breach had affected the systems of its parent company Intuit or customer data beyond the Mailchimp accounts compromised.<\/p>\n

It temporarily suspended account access for the affected accounts where suspicious activity was detected to protect users’ data.<\/p>\n

“We notified the primary contacts for all affected accounts on 12 January, less than 24 hours after the initial discovery,” Mailchimp said.<\/p>\n

“That afternoon, we sent another email to affected accounts with steps to help users reinstate access to their Mailchimp accounts safely.”<\/p>\n

“Since then, we’ve been working with our users directly to help them reinstate their accounts, answer questions, and provide any additional support they need.”<\/p>\n

TechCrunch reported<\/strong><\/a> that one compromised customer was WooCommerce, which provides open-source e-commerce tools for small businesses. It has over 5 million customers.<\/p>\n

Mailchimp admitted that an incident of this nature could cause uncertainty and said it was “deeply sorry for any frustration.”<\/p>\n

“We are continuing our investigation and will be providing impacted account holders with timely and accurate information throughout the process.”<\/p>\n

\n

Now read: Lawyers must pay R5.5 million after cyberattackers steal homebuyer’s money<\/a><\/h2>\n","protected":false},"excerpt":{"rendered":"

Mailchimp’s security team identified an unauthorised actor accessing one of the tools used by the company’s customer-facing teams for customer support and account administration on 11 January 2023.<\/p>\n","protected":false},"author":341042,"featured_media":477003,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[72252,71426,83791,30534],"class_list":["post-476999","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-cyberattacks","tag-mailchimp","tag-social-engineering","tag-woocommerce"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/476999"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341042"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=476999"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/476999\/revisions"}],"predecessor-version":[{"id":477039,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/476999\/revisions\/477039"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/477003"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=476999"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=476999"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=476999"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}