Mailchimp

In January 2023, Mailchimp detected unauthorized access within their infrastructure by an intruder who gained access to one of the tools used for user account administration and customer support. This breach was the result of social engineering attacks targeting Mailchimp employees, leading to compromised account credentials. Although Mailchimp stated that no sensitive information was stolen, the breach potentially exposed customers' names and email addresses. This incident highlights the dangers of social engineering and the importance of strong cybersecurity measures to protect against unauthorized access.

Source: https://www.ekransystem.com/en/blog/top-10-cyber-security-breaches

TPRM report: https://scoringcyber.rankiteo.com/company/mailchimp

"id": "mai951050824",
"linkid": "mailchimp",
"type": "Cyber Attack",
"date": "01/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Technology',
                        'name': 'Mailchimp',
                        'type': 'Organization'}],
 'attack_vector': 'Social Engineering',
 'data_breach': {'sensitivity_of_data': 'Low',
                 'type_of_data_compromised': ["Customers' names",
                                              'Email addresses']},
 'date_detected': 'January 2023',
 'description': 'In January 2023, Mailchimp detected unauthorized access '
                'within their infrastructure by an intruder who gained access '
                'to one of the tools used for user account administration and '
                'customer support. This breach was the result of social '
                'engineering attacks targeting Mailchimp employees, leading to '
                'compromised account credentials. Although Mailchimp stated '
                'that no sensitive information was stolen, the breach '
                "potentially exposed customers' names and email addresses. "
                'This incident highlights the dangers of social engineering '
                'and the importance of strong cybersecurity measures to '
                'protect against unauthorized access.',
 'impact': {'data_compromised': ["Customers' names", 'Email addresses'],
            'systems_affected': ['User account administration tools',
                                 'Customer support tools']},
 'initial_access_broker': {'entry_point': 'User account administration and '
                                          'customer support tools'},
 'lessons_learned': 'The incident highlights the dangers of social engineering '
                    'and the importance of strong cybersecurity measures to '
                    'protect against unauthorized access.',
 'post_incident_analysis': {'root_causes': 'Social engineering attacks '
                                           'targeting Mailchimp employees '
                                           'leading to compromised account '
                                           'credentials.'},
 'title': 'Mailchimp Unauthorized Access Incident',
 'type': 'Unauthorized Access',
 'vulnerability_exploited': 'Compromised Account Credentials'}