Did BrandRoot Get Hacked?

I got those emails too. Even include accounts that weren't mine.

NamePrime said:

I got those emails too. Even includes accounts that wasn't mine.

Click to expand...

Seems like someone hacked BrandRoot. Regardless, I have tons of new emails to add to my leads list! lol Just kidding. Sort of.

Hi,

Just received around 100 emails from Brandroot:



The emails contain usernames and email ids of users (mine and others) . So now I know the email ids of other user and they know mine. As I am writing this more emails are coming in.

Just amazed at the level of the bug

That can't be good...

I was asked to verify my account via link. I mistakenly entered my username and password in the same window, not thinking it could have been related to a hack.




Potentially sensitive information has been leaked:

Username:
Name:
Email Address:

I am getting more angry by the minute , a lot of people now know the username I use on non public platforms

I've tried to log into my account and I can't. I get the following message below:

"Login denied! Your account has either been blocked or you have not activated it yet. - See more at: https://www.brandroot.com/login#sthash.nF4d3xQF.dpuf"

Anyone else having the same issue?

phishing

domainmarket.io said:

Anyone else having the same issue?

Click to expand...

I was asked to verify my account via email link.



I was able to log in afterwords.

This happened to me and 14 other users on 23-SEP-2015. Everyone on the public list could see everyone else's email details.

I expressed my concern regarding the fact that my account details were made public and also my disbelief that Brandroot cannot organise a simple BCC mailing list. They did not reply to my complaint.

I have since withdrawn all my names and never used Brandroot again. I'm saddened, but not surprised, that their complacency continues...

NamePrime said:

phishing

Click to expand...

Can you confirm this? Or were you saying it would be called a phishing attack if this was a hack designed to get me to enter my info?

I copied the domain from the email, [email protected], and tested it for an IDN. How can I test this further to determine if it was a phishing attack?

https://www.namepros.com/threads/what-is-going-on-with-brandroot.947993/

moved here by mods

I got 65 of these emails.

Soooooo hacked.

I just received an unbelievable number of emails from Brandroot...

Enwych said:

Soooooo hacked.

Click to expand...

Seems that way. Perhaps @Brandroot could help clarify the situation.

They should just close the service if they cannot provide data security

Soooooo hacked. Obviously. All my info is available on Whois, but still not good.

Very sorry everybody! Looks like our email system had a bit of breakdown. For the privacy of the other individuals please delete these emails. The problem will be resolved today. You should not be receiving any more emails. I don't believe any existing accounts are affected. Let me know if you are unable to login if you already have an account with us.

In the last few minutes I've received 81 emails from BrandRoot. Three were addressed to me and the 78 others were addressed to other sellers and included their real life name, their username and their email address. The 81 emails were divided into three subject headings:

1. Please Verify Your Account at BrandRoot (18)
2. A Seller Account Has Been Closed (30)
3. Your Seller Account Has Been Closed (33)

I'm sure this is due to a system error but it is disconcerting. Glad to hear that Michael is addressing the issue.

Keith DeBoer said:

In the last few minutes I've received 81 emails from BrandRoot. Three were addressed to me and the 78 others were addressed to other sellers and included their real life name, their username and their email address. The 81 emails were divided into three subject headings:

1. Please Verify Your Account at BrandRoot (18)
2. A Seller Account Has Been Closed (30)
3. Your Seller Account Has Been Closed (33)

I'm sure this is due to a system error but it is disconcerting. Glad to hear that Michael is addressing the issue.

Click to expand...

Yes, it is very disconcerting. We have had many recent hack attempts, which all have been blocked but it seems some of our code may have been affected in some way. We are doing everything we can to restore accounts and prevent this from happening again. We have also integrated CloudFlair to help prevent future hacks. This problem is obviously something we failed to catch.

@Dominium we did get your message and that issue was resolved. This is a separate, site-wide problem.

We take the security of your information very seriously and have taken every step possible to protect the site, including encrypting every page with HTTPS, utilizing CloudFlair, and implementing very strict form validation. Please be patient with us while we resolve this problem. Again, I'm very sorry that we allowed your data to be compromised. The information was only sent out to existing Brandroot sellers and possibly a few Brandroot seller applicants. My hope is in the integrity of this industry. Please delete any emails that were sent to you by mistake.

Brandroot said:

My hope is in the integrity of this industry. Please delete any emails that were sent to you by mistake.

Click to expand...

Some may say "hope in one hand and ..................". Can't rely on hope when it comes to a data breach.

Brandroot said:

Very sorry everybody! Looks like our email system had a bit of breakdown. For the privacy of the other individuals please delete these emails. The problem will be resolved today. You should not be receiving any more emails. I don't believe any existing accounts are affected. Let me know if you are unable to login if you already have an account with us.

Click to expand...

Hope this will resolve soon.

Yep, got the emails too.