Basketball fans interested in receiving regular email updates from the NBA may have had some of their personal data stolen, the organization confirmed.
The NBA sent a "cybersecurity incident notice" to an "unknown number" of fans, BleepingComputer reported.
In the notice, the organization said that some fans who signed up for email marketing services such as newsletters may have had their names and emails taken by an unknown threat actor. These data have been stored by a third-party newsletter service in charge of sending notifications and news by email.
passwords are safe
“We recently learned that an unauthorized third party gained access to and obtained a copy of your name and email address, which were held by a third-party service provider that helps us communicate via email with fans who have shared this information. information with the NBA. the NBA said.
Other data remains secure, the organization added: "There is no indication that our systems, your username, password, or any other information you have shared with us has been affected."
This information suggests it was clearly a supply chain attack, however the NBA did not specify who the third party was targeted or how it was breached.
It warned its users that whoever obtained this data can now use it in phishing and phishing attacks (opens in a new tab):
"Given the nature of the information, there may be an increased risk that you will receive phishing emails from email accounts that appear to be affiliated with the NBA, or of being targeted by other so-called "social engineering" (when an individual seeks to induce the target to share confidential information or take actions contrary to their own interests," the NBA said.
The organization concluded the update by saying that the NBA will never ask its fans for any type of account information.
To be safe, he added, fans are urged to be safe any time they receive an email that appears to be from the NBA. They can do this by making sure the email was sent from an @NBA address and that all links shared in the email point to a trusted website. Finally, fans are advised to never open attachments they didn't expect to receive.
Via: BleepingComputer (Opens in a new tab)