> evidence suggests that the cyber criminal accessed servers that contained some of our customers’ recipient email lists/addresses and customer contact informat

> evidence suggests that the cyber criminal accessed servers that contained some of our customers’ recipient email lists/addresses and customer contact information. We have not found any forensic evidence that customer lists or customer contact information was stolen. Which doesn't mean the customer list data wasn't stolen. The wording on this is too cute. Accessing data from privileged accounts doesn't necessarily leave evidence, depending on the type of system access or server logging involved. I think SendGrid should clarify what could have happened here, worst case.