Security News > 2023 > January > FanDuel discloses data breach caused by recent MailChimp hack
Last Thursday, FanDuel emailed customers to warn them that the threat actors acquired their names and email addresses during the MailChimp breach.
"Recently, we were informed by a third-party technology vendor that sends transactional emails on behalf of its clients like FanDuel that they had experienced a security breach within their system that impacted several of their clients," reads a FanDuel 'Notice of Third-Party Vendor Security Incident' seen by BleepingComputer.
FanDuel also stressed that this was not a breach of their systems or FanDuel user accounts and that the hackers did not acquire "Passwords, financial account information, or other personal information" during the breach.
FanDuel urges customers to "Remain vigilant" against phishing attacks and attempted account takeovers after their data was exposed in this recent breach.
"Remain vigilant against email"phishing" attempts claiming an issue with your FanDuel account that requires providing personal or private information to resolve the problem," warns the FanDuel security incident email.
Many account compromises are caused by using the same credentials at FanDuel as other sites then suffer data breaches.
News URL
Related news
- Bologna FC confirms data breach after RansomHub ransomware attack (source)
- Rhode Island confirms data breach after Brain Cipher ransomware attack (source)
- Texas Tech University System data breach impacts 1.4 million patients (source)
- Ireland fines Meta $264 million over 2018 Facebook data breach (source)
- New fake Ledger data breach emails try to steal crypto wallets (source)
- Meta Fined €251 Million for 2018 Data Breach Impacting 29 Million Accounts (source)
- 46% of financial institutions had a data breach in the past 24 months (source)
- UN aviation agency investigating possible data breach (source)
- Washington state sues T-Mobile over 2021 data breach security failures (source)
- Largest US addiction treatment provider notifies patients of data breach (source)