NZ Post / Shipmate info compromised?

Forums › Off topic › NZ Post / Shipmate info compromised?

Lias

3296 posts

Uber Geek
+1 received by user: 1797

Trusted

Lifetime subscriber

Topic # 230570 2-Mar-2018 11:27

Last year I signed up for the Shipmate trial with a unique email address. This morning I received what appears to be a phishing email to that address, purporting to be from NZ Post.

From: noreply@salesforce.com on behalf of My Food Bag <wahib.idris@davanti.co.nz>

To: uniquealias@mydomain

Subject: Welcome to My Food Bag

Hi <My real name>,

            Welcome to My Food Bag! To get started, go to https://nzpostcommunities.force.com/myfoodbag

            Username: uniqueaddress@mydomain

            Thanks,

            New Zealand Post Limited

I've looked at the headers, it did originate at SalesForce, and davanti.co.nz appears to be a legitimate consulting company that specializes in salesforce stuff. I'm wondering if perhaps they were contracted to do stuff with shipmate and in turn have been compromised.

Anyone else who used shipmate receive anything like this, alternatively does anyone have any contacts at NZ Post/Shipmate?

Information wants to be free. The Net interprets censorship as damage and routes around it.

russkinz

6 posts

Wannabe Geek

Reply # 1966994 2-Mar-2018 12:02

Yep. Just got this exact same email (albeit with a different email address!). I have not gone any further.

Could simply be human error though, someone clicked the wrong button and emailed out the MFB welcome message to everyone. I've never used MyFoodBag and haven't signed up or anything...

Lias

3296 posts

Uber Geek
+1 received by user: 1797

Trusted

Lifetime subscriber

Reply # 1966998 2-Mar-2018 12:06

russkinz:

I've never used MyFoodBag and haven't signed up or anything...

Same.

Information wants to be free. The Net interprets censorship as damage and routes around it.

hairy1

2711 posts

Uber Geek
+1 received by user: 357

Trusted

Lifetime subscriber

Reply # 1967029 2-Mar-2018 13:21

Yep. Same here.

My views (except when I am looking out their windows) are not those of my employer.

russkinz

6 posts

Wannabe Geek

Reply # 1967060 2-Mar-2018 14:06

Glitch.

Hi,

An email you received from New Zealand Post with subject ‘Welcome to My Food Bag’ was sent as a result of a glitch in our system – we are very sorry.

Please be assured your personal information has not been shared by New Zealand Post with My Food Bag. We take our customers’ privacy very seriously. We regret if the email has caused you any confusion.

If you have any queries relating to this, please contact 0800 222 528.

Best regards

Bryan Dobson

Chief Marketing Officer

Auckland Operations Centre

Level 1, 23 Underwood Street, East Tamaki, Auckland 2013

PO Box 204203, Highbrook, Auckland 2161

www.nzpost.co.nz | www.courierpost.co.nz

Lias

3296 posts

Uber Geek
+1 received by user: 1797

Trusted

Lifetime subscriber

Reply # 1967067 2-Mar-2018 14:26

Yep also just received that..

It does leave a hell of a lot of unanswered questions however.

Information wants to be free. The Net interprets censorship as damage and routes around it.

grimwulf

47 posts

Geek
+1 received by user: 15

Reply # 1967134 2-Mar-2018 16:00

Davanti are a consulting company that do work on Salesforce and by extension it's related marketing automation tool(s) 'Marketing Cloud'.

Somehow doubt it's a compromise - much more likely to be a mass-email automation error by some poor dev guy/gal probably in a test environment.

Why they have real production data in a test environment however...