Basic: unauthorized access to the ferret One marketing platform

On 27 October, Basic disclosed that a flaw in an internal admin function of its B2B marketing platform ferret One let a third party create a rogue account on 14 October. It found and deleted the account on 26 October, closed the route and fixed the flaw. Unauthorized logins were confirmed on six accounts of Basic and its customers, and the email addresses customers use to log in may have been viewed or taken. What the six accounts could reach is still under investigation. Two-step authentication is now mandatory and the affected passwords were reset. The service continues.