Huge Email Hack Reveals Customer Info From Target, JP Morgan and 50+ More Big Brands

By Joe Coscarelli Tue., Apr. 5 2011 at 9:16 AM

The digital marketing firm Epsilon told its clients on Friday of "an unauthorized entry into Epsilon's email system," insisting it "was limited to email addresses and/or customer names only" and that no other information was at risk, but it's only now becoming clear just how widespread the hack really was, having affected some of the biggest brands and retailers in the world, including, but not limited to Target, Best Buy, Capital One, TiVo, US Bank, Citi, and Walgreens. Basically capitalism is crashing down before our very eyes. Because of email.

That's a slight exaggeration, but the list -- still growing -- is staggering in size and scale. Target said, "Epsilon took immediate action to close the vulnerability and notified law enforcement," but that's too vague for our taste. Target is also warning customers "that their email addresses and names may now be in unsafe hands and is asking customers to exercise care when opening and responding to email," Mashable reports, which seems more honest.

According to the tech blog, there's a pretty wide range of scenarios we consumers could be facing:

At the best, you might see slightly more spam than usual in your inbox. At worst, you might have your email account brute-forced and mined for other sensitive data. In either case, an extra dose of caution and an extra secure password are in order.

Either way, not completely awful, but here's a list of breached:
• Target
• Best Buy
• Walgreen's
• Capital One
• TiVo
• JP Morgan Chase & Co.
• Kroger
• US Bank
• Citi
• McKinsey & Company
• Ritz-Carlton Rewards
• Marriott Rewards
• New York & Company
• Brookstone
• The College Board
• Home Shopping Network (HSN)
• LL Bean
• Disney Destinations
• Barclays Bank of Delaware
• Air Miles
• Red Roof Inn
• AbeBooks
• Hilton Honors
• Beachbody
• 1-800-Flowers
• The Home Depot
• TigerDirect
• New York & Company
• Bebe

Basically, if you've ever used money, you're a candidate for some extra email spam, as if that's not what these companies were doing to you already.

[jcoscarelli@villagevoice.com / @joecoscarelli]

We Recommend

NoelSydney

Some businesses are becoming reckless in keeping client's information private. I have accounts on some of the businesses listed, and I worry not only about my email account but also my bank information. I'd hate to experience what Michelle went through.

email encryption

Michelle

It's either a total fluke or they are wrong about only email addresses being hacked. My credit card (not a Target card) was hacked to the tune of $212 from a Target in another state clear across the country.

JaniaS

I'm hoping for a class action lawsuit. I'm already getting emails that look very official, logo and all, pretending to be from my credit card company with links that go to a website in Brazil. I can only hope no one falls for the data mining emails but I'm afraid less tech-savvy people might which makes this far more than the "inconvenience" Epsilon is calling this. It is a serious breach of trust and needs to be dealt with as such. Epsilon needs to pay and pay BIG for what it has done. Make an example of them so other firms learn the importance of keeping our information secure.