Sendgrid got hacked

6 points by jipiboily 10 years ago

I just received an email from them...:

Dear [MY NAME],

We recently became aware of unauthorized access to usernames, email addresses, and encrypted passwords for a very small subset of our users (0.5%). No payment information was accessed. If you are receiving this message, you need to take action and change your SendGrid password for username(s): [MY EMAIL]. Note, this may include subuser account usernames. Please change your password within the next two weeks to avoid disruption of your service.

Please note that changing your password without updating your integration points will stop your mail flow. If you need help changing your password, view this link and please feel free to reach out to our Support team with any additional questions.

Best, SendGrid Support

QUFB 10 years ago |

Nice of SendGrid not to recommend what is obvious to most of us: If your SendGrid password is shared with any other accounts, please change it universally.

DKnoll 10 years ago | |

If you share passwords between services that is a fault well beyond the scope of SendGrid support... that's a major OPSEC fail.

jipiboily 10 years ago | |

Yeah, so glad of using different passwords everywhere!