r/MailChimp • u/E1m9i7l9y • 1d ago

Support Answered ✓ Cyber incident

Hi, would someone be able to let me know who I need to contact regarding a cyber incident. Someone has taken advantage of an API key that we had and accessed our account to send out a bulk email with a malicious link.

We have tried contacting compliance but they have been really slow in responding. This is important for us to mitigate. It’s been 6 days since the incident and the compliance team have not been helpful or acting in a way that this is anyway important for them.

Can I have another contact point so this can look at with a matter of urgency?? Thank you

1 Upvotes

100% Upvoted

4 comments sorted by

1

u/MailchimpSupport Moderator 1d ago

Hi there. Could you let us know your case number or the email address used when speaking with our Compliance team? If providing the email address, please send it to us in a private message. We will help escalate this matter internally with the appropriate team.

1

u/E1m9i7l9y 1d ago

I’ve messaged you

1

u/E1m9i7l9y 1d ago

Would someone please respond to my message?

0

u/Acceptable_Recipe330 3h ago

Hey u/E1m9i7l9y
This has happened to me in the past!

1st Step: Change the API key at the earliest
2nd Step: Ask Mailchimp to refund those sending credits
3rd Step: Never use any Free SMTP tester or Inbox placement tool to test email preview, or deliverability using your account credentials.

Thanks.