Spammers Target Kroger Customers
Summary: Kroger disclosed that its customer names and email addresses had been breached by someone outside the company, following similar acknowledgments from McDonald's, Walgreens, Honda, deviantART, TripAdvisor and play.com. Reporting later tied the breach to email service provider Epsilon, with disclosures from U.S. Bank, JP Morgan Chase, McKinsey Quarterly, New York & Co, Home Shopping Network, TiVo, Target, 1800Flowers, Dell Australia, Best Buy, Marks & Spencer and Verizon, and SecurityWeek listing Capital One, Marriott Rewards, Ritz Carlton and several Kroger-owned grocery brands among those affected.
Bottom line: A single email service provider holding the customer lists of dozens of major brands turned one intrusion into a rolling series of disclosures across retail, banking, hospitality and telecom - and the stolen addresses feed phishing campaigns that impersonate those same trusted brands.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026