IGREKS: unauthorized access to the Y-mail email delivery service

In the early hours of 24 October IGREKS, which runs the Y-mail email delivery service, detected hostile traffic to its portal site and blocked access. It later found traces of intrusion and said credentials that may have leaked in the attack were used to enter some customers' delivery environments and may have sent phishing emails to the recipients those customers manage. It reset admin logins for all customers and ended all sessions. Sampled environments show no direct export of personal data, but up to 30 email addresses per newsletter may have been viewed. The number of emails sent and whether data leaked are still under investigation.