Forest Global Training Partners

Cyber Risks · Krebs on Security

Send Grid: Employee Account Hacked, Used to Steal Customer Credentials

Summary: SendGrid disclosed that a cyber criminal compromised a SendGrid employee's account and used it to access several internal systems on three separate dates in February and March 2015, systems that held usernames, email addresses, and salted and iteratively hashed passwords for customer and employee accounts. The company said evidence suggests the attacker also reached servers containing some customers' recipient email lists and contact information, though it found no forensic evidence those lists were stolen, and it is implementing a system-wide password reset while urging customers to change passwords and enable multi-factor authentication.

What you should know: SendGrid manages billions of emails for brands including Pinterest, Spotify and Uber, which makes control of its whitelisted accounts a prime target for fraudsters and spammers - and the initial assurance that only a single customer account was compromised had to be walked back once investigators from law enforcement and FireEye's Mandiant team established the employee account had reached internal systems on three separate dates.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related