ENKR

Ymirlink email delivery service data breach

Add to my breach check

Made public

What leaked1

Hard to replace

  • Email address
  • Email addressaddresses in the exported data; details still under investigation

To-dos

None of the harms this check covers.

What happened next9 events

  1. UndetectedNone on record
  2. Response 9 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Second report: 51,628,280 records (cumulative) leaked from 49 Cuenote FC systems, 16 systems still under review; 190 contract-holder records viewable in Cuenote BASE
  2. Log review found unauthorised access and data export in 42 more systems
  3. Opened a dedicated phone and email inquiry desk
  4. Filed a first report on the TSE: about 9 million records including email addresses exported from five systems · estimate
  5. Stopped every system in the affected data centre as a precaution
4 more
  1. Identified an attack through a library flaw and blocked the suspicious IP addresses
  2. Staff found unauthorised access to part of its systems
  3. Filed a report with investigative authorities
  4. Disconnected the affected servers, patched the flaw and removed the support staff credentials the attacker had taken
Company
Ymirlink
Company detected it
Made public
Notice
Leak confirmed
Affected
9,000,000 records including email addresses, cumulative estimate from five systems · duplicates included; first report

Sources