Companies impacted by Mailchimp data breach warn their customers

The recent Mailchimp data breach has impacted multiple organizations, some of them are already notifying their customers.

The popular email marketing and newsletter platform Mailchimp recently disclosed a news data breach, the incident exposed the data of 133 customers.

Threat actors targeted the company’s employees and contractors to gain access to an internal support and account admin tool.

“On January 11, the Mailchimp Security team identified an unauthorized actor accessing one of our tools used by Mailchimp customer-facing teams for customer support and account administration. The unauthorized actor conducted a social engineering attack on Mailchimp employees and contractors, and obtained access to select Mailchimp accounts using employee credentials compromised in that attack.” reads the notice published by the company. “Based on our investigation to date, this targeted incident has been limited to 133 Mailchimp accounts.”

The company added that there is no evidence that this security breach affected Intuit systems or other customer data beyond the reported 133 accounts.

The malicious activity was discovered on January 11, 2023, in response to the intrusion the company temporarily suspended access for impacted accounts. The company also notified the primary contacts for all affected accounts less than 24 hours after the initial discovery.

The list of the impacted companies includes WooCommerce, FanDuel, and the Solana Foundation.

TechCrunch first reported that one of the compromised accounts belongs to e-commerce giant WooCommerce.

“In a note to customers, WooCommerce said it was notified by Mailchimp a day later that the breach may have exposed the names, store web addresses and email addresses of its customers, though it said no customer passwords or other sensitive data was taken.” reads the post published by TechCrunch. “WooCommerce, which builds and maintains popular open source e-commerce tools for small businesses, relies on Mailchimp for sending emails to its customers. WooCommerce is said to have more than five million customers.”

WooCommerce sent a notice related to MailChimp data breach to its users via email.

The company informed customers that some of their data may have been exposed, including name, URL, address, and email address. WooCommerce pointed out that payment data, passwords or other sensitive information was not exposed.

MailChimp data breach also impacted the Solana Foundation, the nonprofit organization behind the Solana blockchain. The organization told its customers that the security breach may have exposed their info, including names, email addresses and Telegram usernames.

Another company impacted by the data breach is the online gambling service FanDuel who warned its customers of phishing threat after data breach at Mailchimp. The company told its customers that their name and email address may have been compromised due to a security breach suffered a third-party technology vendor.

Both data breach notices send by Solana and FanDuel do not explicitly name Mailchimp.

Source Graham Cluley

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, data breach)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.