Mailchimp discloses a breach where hackers accessed 319 accounts and stole “audience data” from 102 clients; phishing scams of crypto users quickly followed
Mailchimp's 102 affected clients must treat the stolen audience data as an active phishing risk, particularly because scams aimed at crypto users followed quickly.
The compromise of 319 Mailchimp accounts turns customer contact lists into a direct targeting resource for the attackers.
Second-order effects
Mailchimp customers face pressure to pair breach notifications with rapid anti-phishing communications, since the stolen data was reportedly followed by scams rather than merely disclosed as an access incident.
The earlier HubSpot breach means marketing-platform buyers, especially those serving crypto audiences, have evidence that vendor account compromise can create shared downstream exposure across client bases.
Third-order effects
The later Mailchimp social-engineering breach suggests that protecting aggregated customer data increasingly depends on staff and account-access controls, not solely on the security of customer-facing systems.
If breaches at marketing providers continue to yield immediately usable contact data, customers will increasingly evaluate those providers as part of their fraud-prevention infrastructure rather than only as communications tools.
The trend: Customer-data platforms are becoming upstream phishing-risk concentrators, as a single provider compromise can supply attackers with contact lists spanning many clients.
MailChimp have confirmed that their service has been compromised by an insider targeting crypto companies. We have managed to take the phishing domain offline. We are trying to determine how many email addresses have been affected. 1/
We are investigating a potential data breach of an opt-in newsletter hosted on MailChimp. A scam email warning of a data breach is circulating. Do not open any email originating from noreply@trezor.us, it is a phishing domain.
Never open/click on ANYTHING you receive related to your cryptos. And why the hell would anyone subscribe to a Trezor newsletter? Is there really that much exciting and interesting Trezor news? Employee of the Month? Company picnic? Seed phrase crossword puzzle? Be smarter. https…
I don't know about you, but I for one look forward to comparing the phishing e-mails that I get from the Ledger marketing database hack with the e-mails that I'll be getting from the Trezor MailChimp hackers. Which ones are scammier? There is only one way to find out! https://twi…
Mailchimp sucks, they slowly increased their prices and keep ramping them up on customers who integrated into it. I would never use them again and this breach just confirms what I'd always suspected about their security. https://twitter.com/...
Your KYC information will be stored on the equivalent of Mailchimp Hacks are inevitable. The only way to safeguard personal info from bad actors is to never give it to incompetent middlemen. https://twitter.com/...
Do not open any emails that appear to be coming from Trezor! You can use your Trezors without ever needing to open any of their emails. https://twitter.com/...
Please be careful if you use Trezor. Their mailchimp was compromised and might have sent you a phishing scam link in email. On a further note what if the email community has a multi-sig approach too? Like can't send out mass emails unless approved by 3/5 keys lol https://twitter.…
We will not be communicating by newsletter until the situation is resolved. Do not open any emails appearing to come from Trezor until further notice. Please ensure you are using anonymous email addresses for bitcoin-related activity. 2/