NZ Post / Shipmate info compromised?

Forums › Off topic › NZ Post / Shipmate info compromised?

Lias

5655 posts

Uber Geek
+1 received by user: 3978

ID Verified

Trusted

Lifetime subscriber

#230570 2-Mar-2018 11:27

Last year I signed up for the Shipmate trial with a unique email address. This morning I received what appears to be a phishing email to that address, purporting to be from NZ Post.

From: noreply@salesforce.com on behalf of My Food Bag <wahib.idris@davanti.co.nz>

To: uniquealias@mydomain

Subject: Welcome to My Food Bag

Hi <My real name>,

            Welcome to My Food Bag! To get started, go to https://nzpostcommunities.force.com/myfoodbag

            Username: uniqueaddress@mydomain

            Thanks,

            New Zealand Post Limited

I've looked at the headers, it did originate at SalesForce, and davanti.co.nz appears to be a legitimate consulting company that specializes in salesforce stuff. I'm wondering if perhaps they were contracted to do stuff with shipmate and in turn have been compromised.

Anyone else who used shipmate receive anything like this, alternatively does anyone have any contacts at NZ Post/Shipmate?

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup. Opinions are my own and not the views of my employer.

russkinz

17 posts

Geek
+1 received by user: 2

#1966994 2-Mar-2018 12:02

Yep. Just got this exact same email (albeit with a different email address!). I have not gone any further.

Could simply be human error though, someone clicked the wrong button and emailed out the MFB welcome message to everyone. I've never used MyFoodBag and haven't signed up or anything...

Lias

5655 posts

Uber Geek
+1 received by user: 3978

ID Verified

Trusted

Lifetime subscriber

#1966998 2-Mar-2018 12:06

russkinz:

I've never used MyFoodBag and haven't signed up or anything...

Same.

hairy1

3352 posts

Uber Geek
+1 received by user: 644

ID Verified

Trusted

Lifetime subscriber

#1967029 2-Mar-2018 13:21

Yep. Same here.

My views (except when I am looking out their windows) are not those of my employer.

russkinz

17 posts

Geek
+1 received by user: 2

#1967060 2-Mar-2018 14:06

Glitch.

Hi,

An email you received from New Zealand Post with subject ‘Welcome to My Food Bag’ was sent as a result of a glitch in our system – we are very sorry.

Please be assured your personal information has not been shared by New Zealand Post with My Food Bag. We take our customers’ privacy very seriously. We regret if the email has caused you any confusion.

If you have any queries relating to this, please contact 0800 222 528.

Best regards

Bryan Dobson

Chief Marketing Officer

Auckland Operations Centre

Level 1, 23 Underwood Street, East Tamaki, Auckland 2013

PO Box 204203, Highbrook, Auckland 2161

www.nzpost.co.nz | www.courierpost.co.nz

Lias

5655 posts

Uber Geek
+1 received by user: 3978

ID Verified

Trusted

Lifetime subscriber

#1967067 2-Mar-2018 14:26

Yep also just received that..

It does leave a hell of a lot of unanswered questions however.

grimwulf

121 posts

Master Geek
+1 received by user: 85

#1967134 2-Mar-2018 16:00

Davanti are a consulting company that do work on Salesforce and by extension it's related marketing automation tool(s) 'Marketing Cloud'.

Somehow doubt it's a compromise - much more likely to be a mass-email automation error by some poor dev guy/gal probably in a test environment.

Why they have real production data in a test environment however...