After a Vendor Hack, FanDuels Warns of a Data Breach

A security breach has been detected at FanDuel’s sportsbook and betting site, which exposed customers’ names, email addresses, and payment information. This occurred in January 2023, when MailChimp’s security was breached. A security advisory urges users to be wary of phishing emails and stay vigilant against them. 

An employee’s credentials were stolen by hackers using a social engineering attack on MailChimp’s website on January 13th, according to an announcement from the company. 

To steal the “audience data” of 133 users, the threat actors used these credentials to log in to an internal MailChimp tool and access customer support and administration information. 

It is imperative to note that MailChimp customers receive different audience data. However, generally, it contains the names and email addresses of customers, or potential customers, who receive marketing emails about the products and services they are interested in. 

During the MailChimp breach, FanDuel sent an email to its customers last Thursday informing them that they were the victims of a cyberattack by threat actors. 

According to an email received by FanDuel from an outside technology vendor that sends transactional emails o

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.