DocuSign email address database breached and used for phishing campaign
trust.docusign.com
DocuSign email address database breached and used for phishing campaign
1–10 of 141 posts
Re: DocuSign email address database breached and used for phishing campaign
#2Looks like it took them about six days to figure out why their customers were getting spammed. It'd be helpful if they could outline what the "non-core system that allows us to communicate service-related announcements to users via email" actually was. Was this a Mailchimp account that got hacked into or did they have something they managed?
Re: DocuSign email address database breached and used for phishing campaign
#3Emails and email addresses are very different in the context of DocuSign. The former includes the text of contracts. The latter is just a list of people who have ever given or received a job offer.
Re: DocuSign email address database breached and used for phishing campaign
#4Emails and email addresses are very different in the context of DocuSign. The former includes the text of contracts. The latter is just a list of people who have ever given or received a job offer.
Thanks, I've updated the title to specify user email addresses to avoid any confusion
Re: DocuSign email address database breached and used for phishing campaign
#5Emails and email addresses are very different in the context of DocuSign. The former includes the text of contracts. The latter is just a list of people who have ever given or received a job offer.
I have also used DocuSign to buy a house and receive stock options. It's used all over the edges of the legal system.
Re: DocuSign email address database breached and used for phishing campaign
#6Emails and email addresses are very different in the context of DocuSign. The former includes the text of contracts. The latter is just a list of people who have ever given or received a job offer.
I have also used DocuSign to buy a house and receive stock options. It's used all over the edges of the legal system.
Someone asked me to pay a bill using docusign and entering my credit card information into one of those free text boxes They couldn't understand why I refused to do it.
Re: DocuSign email address database breached and used for phishing campaign
#7Emails and email addresses are very different in the context of DocuSign. The former includes the text of contracts. The latter is just a list of people who have ever given or received a job offer.
Sure they're different but make no mistake: emails being breached are a big deal! This is an appropriate response https://twitter.com/troyhunt/status/864315287092342785
Re: DocuSign email address database breached and used for phishing campaign
#8Earlier quoted context omitted.
I have also used DocuSign to buy a house and receive stock options. It's used all over the edges of the legal system.
Someone asked me to pay a bill using docusign and entering my credit card information into one of those free text boxes They couldn't understand why I refused to do it.
Apparently it's as safe as entering credit card details into another online merchants form who is PCI compliant. https://support.docusign.com/en/answers/00004343
Re: DocuSign email address database breached and used for phishing campaign
#9Emails and email addresses are very different in the context of DocuSign. The former includes the text of contracts. The latter is just a list of people who have ever given or received a job offer.
Sure they're different but make no mistake: emails being breached are a big deal! This is an appropriate response https://twitter.com/troyhunt/status/864315287092342785
As troy hunt himself wrote... https://www.troyhunt.com/im-sorry-but-your-email-address-is-...
This is annoying but not a big deal or a privacy breach, DocuSign is so prevalent your email being in there means basically nothing.
Re: DocuSign email address database breached and used for phishing campaign
#10Earlier quoted context omitted.
Sure they're different but make no mistake: emails being breached are a big deal! This is an appropriate response https://twitter.com/troyhunt/status/864315287092342785
As troy hunt himself wrote... https://www.troyhunt.com/im-sorry-but-your-email-address-is-... This is annoying but not a big deal or a privacy breach, DocuSign is so prevalent your email being in there means basically nothing.