Disney is warning those who have signed up for their “Disney Destinations” email notifications that the service providing those emails, Epsilon, was recently compromised – and so were the email addresses they had in their databases.
The Disney email reads “We have been informed by one of our email service providers, Epsilon, that your email address was exposed by an unauthorized entry into that provider’s computer system. We use our email service providers to help us manage the large number of email communications with our guests. Our email service providers send emails on our behalf to guests who have chosen to receive email communications from us.” The email also advises “If you have any questions regarding this incident, please contact us at (407) 560-2547 during the hours of 9:00 am to 7:00 pm (Eastern Time) Monday through Friday, and 9:00 am through 5:00 pm (Eastern Time) Saturday and Sunday.”
Disney isn’t alone in this breach – companies like TiVO, JP Morgan Chase, Capital One, Citi and Brookstone – among many others – also had their email lists compromised. It’s important to note here that the information contained in Epsilon’s databases did not include things like home addresses, credit card information or other personally identifying information – at least that’s what Disney and Epsilon are saying, and I take them at their word. But names and email addresses were compromised in the breach.
It should also be noted that if you don’t receive a warning email from one of these companies, then your information probably wasn’t affected. If you do receive the email, then it’s safe to assume you’ll probably be receiving a lot more spam, as if you didn’t have enough already. As with any spam messages, you should never click on any link or open any file attached. This is a good rule of thumb for any email you don’t reasonably recognize. Since the hackers presumably know which companies information they’ve obtained, it’s possible some of this spam may look like a Disney Destinations email or contain leading subject lines that would suggest the information relates to Disney in some way. Also, and it’s sad this has to be said, NEVER respond to ANY email that asks you for personal, financial or other sensitive information. No reputable company will EVER send an email asking you to follow a link and fill out information that divulges information like passwords, checking account numbers, social security numbers, etc. Unfortunately, the number of people that fall for these scams is mind bending – so be on guard.
Leave a Reply