Disney Destinations E-mail server hacked?

[keishashadow]

The good news: I finally get an email from disney destinations

The bad news: my account information has been compromised

the email i received from college board is a bit more forthcoming as to info, see below:

We have been informed by Epsilon, the vendor that sends email to you on our behalf, that your e-mail address may have been exposed by unauthorized entry into their system.

Epsilon has assured us that the only information that may have been obtained was your first and last name and e-mail address. REST ASSURED THAT THIS VENDOR DID NOT HAVE ACCESS TO OTHER MORE SENSITIVE INFORMATION SUCH AS SOCIAL SECURITY NUMBER OR CREDIT CARD DATA.

Please note, it is possible you may receive spam e-mail messages as a result. We want to urge you to be cautious when opening links or attachments from unknown third parties.

 

[MamaJessie]

I got it from Disney Destinations too.

 

[WaltD4Me]

I got it too from Disney, but mine is blank too. Haven't received it from any other companies. I haven't really noticed more spam than usual lately, but I have to call my mom, remind her about attachments, ect....

 

[starwood]

I've gotten this e-mail from at least 6 other sites.

 

[MikeinBoston]

I got it, hoping they might pass a coupon or value along for the trouble for all of us..

 

[safetymom]

http://www.disunplugged.com/2011/04/03/disney-destinations-email-list-hacked/

Pete posted about it on the blog.

 

[DisneyKevin]

I got it from Disney Destinations and Brookstone.

Me too.

 

[k5jm]

Destination Disney and HSN for me.

 

[keishashadow]

update for me, not thrilled to see my Barclay CC also involved (airtran reward type)

 

[dsnyfan608]

I got it too, but mine was blank

 

[sayhello]

I got it from one of my Credit Cards!

Sayhello

 

[Joshua_me]

Disney Destinations, Trip Advisor and HSN, here....

Yikes,

 

[GSDRescuer]

I got it, hoping they might pass a coupon or value along for the trouble for all of us..

Like this idea!!!

 

[*NikkiBell*]

I got it on my work email of all places...not sure how. I also got one from TiVO.

 

[mdvlprof]

yup.

 

[mazdabug]

Same here. Now I know why I keep getting mailerdemon address return email for the past week. Ugh not good folks.

 

[lsherry]

I got two today from Disney and one yesterday from Fry's.

 

[BGK]

Sorry, I'm going to call jive on Epsilon on this one.

N.B. a statement in Epsilon's press release:

A rigorous assessment determined that no other personal identifiable information associated with those names was at risk.​

To anyone in the marketing trade, "personally identifiable information" has particular meaning. From NIST "Guide to Protecting the Confidentiality of Personally Identifiable Information" via Wikipedia:

Information which can be used to distinguish or trace an individual's identity, such as their name, social security number, biometric records, etc. alone, or when combined with other personal or identifying information which is linked or linkable to a specific individual, such as date and place of birth, mother’s maiden name, etc.​

P.I.I. is not anything which can be obtained from public records, such as your address, real property ownership records, criminal history, employment history for public sector employees, and so on. Generally, P.I.I. is information which you'd use to conduct financial transactions.

There are a number of e-mail service providers which merchants and marketers use to send out mass- or targeted e-mail campaigns, and Epsilon is one of them. Depending on the nature of the service, the associated databases can have what to many people would be a surprisingly detailed record of a person's transactional history with that marketer.

So, Epsilon probably didn't leak any information about you that couldn't be obtained without a modest effort from other sources, but it's likely rather more than that with which you'll be comfortable. I'm very interested, given the seemingly large "footprint" of this breach, in how this story develops. Not for nothing was it released on a Friday...

 

[eeyorethegreat]

Figures can't get a PIN from Disney Destinations but I can get this..... Go figure.

 

[Robin"D"]

I got it from Disney and HSN.

Hate to say we got the same from both...
Hopefully that wil be the end of it....

Robin & Angel "D"