Email marketing platform Mailchimp hacked

The hackers used the data to send out phishing emails

Email marketing platform, Mailchimp, has confirmed that it was a victim of a hack. The infiltration was reportedly conducted using an internal tool and the company says the hackers managed to steal data from more than hundred of its clients.

While the company disclosed the breach on Monday, initial reports of the hacks had sprung up over the weekend. Cryptocurrency wallet Trezor tweeted a day before the disclosure that MailChimp had confirmed the hack and they were trying to determine how many email id's were affected.

Also Read: Why Intuit's $12 billion Mailchimp acquisition stands out

MailChimp have confirmed that their service has been compromised by an insider targeting crypto companies.

We have managed to take the phishing domain offline. We are trying to determine how many email addresses have been affected. 1/

— Trezor (@Trezor) April 3, 2022

The company said that they immediately deactivated the accounts but the hackers were still able to access 300 MailChimp accounts and obtained data from 102 of them.

“We sincerely apologize to our users for this incident and realize that it brings inconvenience and raises questions for our users and their customers,” said Smyth.

“We take pride in our security culture, infrastructure, and the trust our customers place in us to safeguard their data. We’re confident in the security measures and robust processes we have in place to protect our users’ data and prevent future incidents.”

Also Read: Cryptocurrency Prices Today April 5: Bitcoin up, Dogecoin biggest gainer

Crypto wallet Trezor posted a blog, in which it said that hackers managed to gain access to MailChimp's internal tools through successful social engineering.

One of the stolen email lists were used by the hackers to send out phishing emails to Trezor customers, that the company says were, "exceptional in its sophistication and ... clearly planned to a high level of detail.”

It even had a cloned version of Trezor's app presenting a believable aesthetic for users who were duped into using it. MailChimp has said that it has notified all users who were affected by the breach.