• Mailchimp has confirmed it suffered a breach on 11th January, after its team identified an intruder in its system.
• The incident is similar to a breach the email delivery platform suffered in April last year.
• An estimated 133 accounts were impacted before Mailchimp was able to shut down the intruder’s access.

The old adage, fool me once, shame on me, fool me twice, shame on you, seemingly does not apply to Mailchimp as the email delivery platform confirmed that its system was breached on 11th January.

While breaches are commonplace these days, the details surrounding this latest one are nearly identical to another breach suffered by the platform in April of last year. This as the company’s own employees were targeted and access was gained by a threat actor via social engineering tactics.

“Based on our investigation to date, this targeted incident has been limited to 133 Mailchimp accounts. There is no evidence that this compromise affected Intuit systems or customer data beyond these Mailchimp accounts,” the company’s announcement reads.

At the time of writing it is unclear just how long the intruder had access, but Mailchimp does note that as many as 133 accounts were impacted, with the data within them potentially compromised. One of the high-profile accounts belongs to WooCommerce, which has already issued a note to its own customers regarding the incident.

Mailchimp is now in the process of contacting account holders who may have been impacted by this recent breach, but as a general rule of thumb when incidents like this occur, some password refreshing is advised.

“That afternoon, we sent another email to affected accounts with steps to help users reinstate access to their Mailchimp accounts safely. Since then, we’ve been working with our users directly to help them reinstate their accounts, answer questions, and provide any additional support they need,” the company adds.

“We know that incidents like this can cause uncertainty, and we’re deeply sorry for any frustration. We are continuing our investigation and will be providing impacted account holders with timely and accurate information throughout the process,” it concluded.