Mailchimp breach feels like deja vu

A threat actor successfully used compromised employee credentials to gain access to 133 accounts on Mailchimp, the mainstream Intuit-owned email marketing platform, in a security incident that recently came to light.

"On January 11, the Mailchimp Security team identified an unauthorized actor accessing one of our tools used by Mailchimp customer-facing teams for customer support and account administration," said Mailchimp in a blog post. "The unauthorized actor conducted a social engineering attack on Mailchimp employees and contractors, and obtained …

access account accounts actor attack blog blog post breach compromised credentials customer customer support email email marketing employee engineering incident intuit january mailchimp marketing platform security security incident security team social social engineering support team teams threat threat actor tools