2 ms·
Continued.... Here is a comprehensive list of what data was impacted. Only data after November 1st, 2023 was accessed. Emails Sent Accessed: Recipient addres
by quickthrower2 3y ago
Continued....
Here is a comprehensive list of what data was impacted. Only data after November 1st, 2023 was accessed.
Emails Sent
Accessed: Recipient address, sender address, sent date, subject, bcc, cc, reply to, and last event.
Not Accessed: No email content body which includes the HTML and plain text.
Domains
Accessed: Domain names, verification status, region, and DKIM public keys.
Not Accessed: No unencrypted DKIM private keys.
API Keys
Accessed: Names, permission roles, and encrypted tokens.
Not Accessed: No unencrypted tokens.
Logs
Accessed: HTTP Response data such as status code, and HTTP Request data such as method, and endpoint.
Not Accessed: No HTTP Response JSON body, and Request JSON body, or headers.
Contacts
Accessed: Email addresses and names.
Users
Accessed: Resend user email addresses.
Not Accessed: No Resend user names or passwords.
Actions and remediations
These are the preventative measures that we have already taken:
Removed database API environment variable from the client-side of the Resend Dashboard.
Rotated database API access keys.
Enforced MFA across all systems touching the database.
Conducted org-wide password reset across all systems touching the database.
These are the preventative measures that we will be taking immediately:
Improving monitoring and alerting for database API access.
Partnering with a third-party cybersecurity company, Oneleet, to conduct an exhaustive investigation.
Please reach out to us at security@resend.com if you have any questions.
Conclusion
We sincerely apologize to everyone affected by this incident, and we appreciate your understanding as we learn to navigate this challenging period.
This has been an unfortunate and trying moment for us, but solidified the determination and commitment of each and every team member at Resend.
Your trust is what has built us, and we remain deeply committed to ensuring your sending is safe.