Epsilon Breach Raises Specter of Spear Phishing
Summary: Epsilon, an Irving, Texas-based email marketing firm serving roughly 2,500 clients and sending about 40 billion marketing messages annually, disclosed that hackers stole customer names and email addresses belonging to a subset of its clients. Affected brands included three of the top ten U.S. banks - JP Morgan Chase, Citibank and U.S. Bank - plus Barclays Bank and Capital One, and more than two dozen other companies alerted customers over the following weekend.
Bottom line: Rod Rasmussen of the Anti-Phishing Working Group expects the stolen names and brand relationships to fuel spear phishing that addresses recipients by name and correlates services across breached data, then reuses passwords given rampant reuse. Epsilon's parent Alliance Data Systems saw its stock fall $4.77 per share, or 5.55 percent, in mid-day trading Monday.
Read the original at Krebs on Security ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026