Sendgrid got hacked

#1

Post by jipiboily » Tue, Sep 29, 2015, 7:38 PM UTC

I just received an email from them...:

Dear [MY NAME],

We recently became aware of unauthorized access to usernames, email addresses, and encrypted passwords for a very small subset of our users (0.5%). No payment information was accessed. If you are receiving this message, you need to take action and change your SendGrid password for username(s): [MY EMAIL]. Note, this may include subuser account usernames. Please change your password within the next two weeks to avoid disruption of your service.

Please note that changing your password without updating your integration points will stop your mail flow. If you need help changing your password, view this link and please feel free to reach out to our Support team with any additional questions.

Best, SendGrid Support

Re: Sendgrid got hacked

#2

Post by QUFB » Tue, Sep 29, 2015, 7:40 PM UTC

Nice of SendGrid not to recommend what is obvious to most of us: If your SendGrid password is shared with any other accounts, please change it universally.

Re: Sendgrid got hacked

#3

Post by jipiboily » Tue, Sep 29, 2015, 7:41 PM UTC

QUFB wrote: post #2

Nice of SendGrid not to recommend what is obvious to most of us: If your SendGrid password is shared with any other accounts, please change it universally.

Yeah, so glad of using different passwords everywhere!

Re: Sendgrid got hacked

#4

Post by DKnoll » Tue, Sep 29, 2015, 8:19 PM UTC

QUFB wrote: post #2

Nice of SendGrid not to recommend what is obvious to most of us: If your SendGrid password is shared with any other accounts, please change it universally.

If you share passwords between services that is a fault well beyond the scope of SendGrid support... that's a major OPSEC fail.