Mailchimp, a popular email marketing platform, recently confirmed that its service had a data breach.

⠀

The hackers that breached the platform used an internal platform tool to steal the data of more than a hundred clients to conduct a phishing attack on clients that use cryptocurrency services.

⠀

Siobhan Smyth, Mailchimp’s CISO, told TechCrunch that “the company became aware of the breach on March 26 after it identified a malicious actor accessing a tool used by the company’s customer support and account administration team.” After learning about the breach Mailchimp has deactivated the compromised employee account.

⠀

The hacker was able to view about 300 Mailchimp user accounts as well as obtain audience data from 102 users. Smyth has apologized to the Mailchimp users that were affected by the data breach. Smyth has acknowledged that the company takes pride in the security measures that they have in place to protect their users’ and clients’ data to prevent future data breach incidents.

⠀

The use of the internal tool was only one part of how hackers were able to breach Mailchimp’s data. Bleeping Computer reports that the hackers used one of the stolen email lists to send fake data breach notifications to customers of Trezor (a cryptocurrency hardware wallet), which prompts them to download a new version of the desktop version of Trezor Suite. The email that was sent to Trezor users led them to a phishing site that hosted a fake version of the Trezor Suite desktop app.

⠀

The fake Trevor Suite desktop application that Trezor users had to download was programmed to steal the seed phrase that would allow the hackers to gain control over the user’s crypto wallet. Trezor users have been advised by the company to report any new phishing attempts directly to the email: security@trezor.io. Mailchimp has informed the users who were affected by the data breach.

⠀

For more from us at Waivly, join our free fun-to-read and to-the-point newsletter enjoyed by hundreds of people across the internet every day of the week 👇