DocuSign, a provider of electronic signature technology, experienced a data breach wherein hackers obtained email addresses from one of its servers.
The company reported the issue to law enforcement agencies, who are presently looking into the matter, and notified its customers of the data breach. It also cautioned them against falling for phoney emails that purported to be delivering weaponized Word documents.
The threat actor responsible for the DocuSign breach nevertheless declared that hackers had gained access to a non-core system and began a phishing operation against the companies' clients.
DocuSign claims that hackers were only able to acquire email addresses; no proof exists that they were able to obtain financial or personal data, including names, physical addresses, passwords, social security numbers, and credit card information.
"id": "DOC1124231123",
"linkid": "docusign",
"type": "Breach",
"date": "05/2017",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"