Mailchimp is an email marketing platform that companies in particular like to use to send automated newsletters. As the provider itself now communicates, a security incident occurred on January 11, 2023. Hackers gained access to the system and stole sensitive user data. It is ready the second hack in less than a year.
Mailchimp hacked again, 133 accounts affected
Back in August 2022, unknown attackers gained access to the email marketing and newsletter platform Mailchimp and came into possession of user data from around 300 accounts in an almost identical manner.
Now the provider is again affected by a cyberattack, as they announced on their own blog. As early as January 11, the internal security team discovered that unknown persons had gained access to a tool that Mailchimp uses internally for customer support and account administration.
With the access this granted to internal systems, the hackers were able to access user data from 133 Mailchimp accounts. There was no evidence that the attackers were able to access Intuit software or customer data, according to the vendor. Intuit had bought Mailchimp in September 2021 for about $12 billion.
When they noticed the cyberattack, they immediately blocked access for the affected accounts to protect user data, he said. In less than 24 hours, contacts for the accounts in question had already been informed of the incident on January 12, the report added.
According to a report by the website TechCentral, among others, the account of the e-commerce platform WooCommerce was hacked in the course of the current cyberattack. The company said that no customer passwords were compromised, however. But their names, addresses and email addresses in the distribution list were.
Mailchimp intends to conduct further investigations into how such a cyberattack could occur again and intends to provide accurate information to account holders of affected accounts in a timely manner.
