Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Security

April 4th, 2011, 06:56 GMT · By

Massive Email Marketing Provider Breach Affects Major Companies

SHARE:

Adjust text size:


Epsilon breach much larger than originally thought
Enlarge picture
The recently disclosed security breach at Epsilon Data Management, a big email marketing solutions provider, affects the customers of many large companies.

Last week, retail supermarket chain Kroger warned its customers that their email addresses were exposed as a result of a security breach at Epsilon.

But it seems that Kroger is not alone in this, as similar warning letters have begun popping up from numerous other top companies activating in different sectors.

According to reports, the affected firms include U.S. Bank, JP Morgan Chase, Capital One, Brookstone, McKinsey Quarterly, New York & Co, the Home Shopping Network, TiVo, City Market, Dillons, Jay C, Food 4 Less, Fred Meyer, Fry’s, King Soopers, Marriott Rewards, QFC, Ralphs, Ritz Carlton, Smith Brands and Walgreens.

The list is probably more extensive than this, considering that Epsilon is one of the largest email marketing providers in US, even larger than Silverpop, a company that got compromised last year in a similar manner.

The Silverpop breach led to the customer email lists of over one hundred companies to be stolen, including those of McDonald's, Walgreens, Honda Motors or deviantART.

It's interesting that Walgreens appears as a victim in both cases. It's not clear whether the company used both providers or if it switched from Silverpop to Epsilon only to be victimized again.

It's worth noting that following the Silverpop breach, Walgreens' customers were targeted in a mass phishing attack. Customers of Play.com, a major UK online retailer of video games, books and DVDs, received infected emails because of the same compromise.

The affected companies are informing customers to expect more spam than usual, but what they don't say is that spam takes a lot of forms, some more malicious than others.

Users are advised to always exercise caution when dealing with emails carrying attachments or links. Running a capable and up-to-date antivirus solution is also critically important.

FILED UNDER:

TAGS:

email marketing | security breach | stolen email addresses | Epsilon

TELL US WHAT YOU THINK:

1,132 hits · 1 comment · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


Kroger Customer Email List Compromised

Partial TripAdvisor Membership List Stolen ...

Spam Received by Play.com Customers Possibl...

Honda Affected by Data Breach at Email Mark...

Leaks at Walgreens, McDonald's, devian...

READER COMMENTS:


Comment #1 by: FlyBot on 04 Apr 2011, 19:23 GMT reply to this comment

This could be the litigation motherlode for a legal eagle in Florida/California/NYC. There could be some hardcore corporations on the plaintif list. Plus class actions from private individuals pizzed off about having their accounts spammed with malware. Plus Governmental action over data protection and privacy violations. I wouldn't be surprised if Epsilon filed for Bankrupcy Protection - to keep their directors out the food line. Moral of the story is, never trust a 'trusted third party'.

Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM