Email marketing provider Epsilon recently revealed that “a subset of Epsilon clients’ customer data” has been exposed.
As “the world’s largest permission-based email marketing provider” with a roster of more than 2,500 big-name clients, the subset of data includes “email addresses and/or customer names,” as the original press release reported, which are now out in the wild.
An Epsilon spokesperson told Reuters that the company “can’t confirm any impacted or non-impacted clients, or provide a list (of companies) at this point in time,” but here’s a list of the companies that have reportedly had customer data exposed so far:
- 1-800-Flowers
- AbeBooks
- Ameriprise Financial
- Barclays Bank of Delaware
- Best Buy
- Brookstone
- Capital One Financial
- Citigroup
- The College Board
- Disney Destinations
- Hilton Honors
- Home Shopping Network
- JPMorgan Chase
- Kroger
- L.L. Bean
- Marriott Rewards
- McKinsey & Company
- New York & Company
- OfficeTeam/Robert Half
- Ritz-Carlton Rewards
- Target
- TIAA-CREF
- TiVo
- U.S. Bank
- Verizon
- Walgreens
We’ll continue to update this list as more companies get added.
Additional reporting via: SecurityWeek, Reuters, News 13, Telegraph
More on TIME.com: Epsilon System Hacked: Has Your E-Mail Been Stolen?

