MailChimp mail service was hacked once more. This time cyber criminals managed to steal data on approximately 133 clients. The threat actor managed to conduct a successful social engineering attack on Mailchimp employees and contractors. Illicitly obtained credentials were used for accessing Mailchimp accounts. MailChimp specialists detected the incident on the 11th of January 2023. The company representatives got in touch with all the affected parties within 24 hours. Among compromised accounts there also was the WooCommerce’s one. The following data was illicitly obtained by intruders:

• Usernames
• Saved URLs
• Addresses
• Emails

Such confidential data as payment details, passwords etc. was not obtained.

Previously, MailChimp was hacked in spring of 2022.