DocuSign reveals ‘non-core’ system breach powered phishing expedition
DocuSign has revealed a data breach that has allowed malicious actors to conduct a wide-ranging phishing campaign. In a notice on its website, DocuSign said it found the breach when investigating the cause of an increase in DocuSign-impersonating phishing emails. “A malicious third party had gained temporary access to a separate, non-core system that allows us to communicate service-related announcements to users via email,” the company said. […]