MailChimp Security incident

Brueggus

After https://mailchimp.com/march-2022-security-incident/ and https://mailchimp.com/august-2022-security-incident/, here's just another one: https://mailchimp.com/january-2023-security-incident/

On January 11, the Mailchimp Security team identified an unauthorized actor accessing one of our tools used by Mailchimp customer-facing teams for customer support and account administration. The unauthorized actor conducted a social engineering attack on Mailchimp employees and contractors, and obtained access to select Mailchimp accounts using employee credentials compromised in that attack.

Based on our investigation to date, this targeted incident has been limited to 133 Mailchimp accounts, and there is no evidence that this compromised customer data beyond these Mailchimp accounts.

I know a bunch of providers who use MailChimp and so I'm wondering if any of them has been affected?

Encoders

at this point i'm pretty impressed how they get (((incident))) in about 6 month interval

what about making it into monthly incident?

Janevski

There's just too many hackers out there, working at night time, with the lights off...

AuroraZero

@Janevski said:
There's just too many hackers out there, working at night time, with the lights off...

That's my time dammit! Stop stealing my time ya suckwads!

bikegremlin

Mailchimp seems to be really social.