After reviewing unusual activity over the last few days within a subset of our customer accounts, we discovered that several of our customers may have fallen victim to malware or phishing attempts, which could have exposed their Linnworks credentials to outside actors. Our monitoring has identified that some stolen credentials have appeared within illegally obtained “combo lists,” where billions of usernames and passwords taken from many different external accounts are offered for sale in an open market.
Our Security and Engineering teams have active security scans and audits in place, and continue to audit user and system activity. We found no evidence that the Linnworks platform has been compromised or subject to data breach. However, given the likely possibility that some customers may have been targets of malware or phishing attacks, we wanted to notify our account holders about preventative steps to take in order to protect your Linnworks account.
We recommend all of our customers take immediate action to:
Ensure that the users listed in your Linnworks account are correct, have valid roles identified, and represent only current & known employees or contractors. In particular look for any new users that have been recently added or any user emails that may have been changed.
Enable two-factor authentication whenever possible to protect user accounts even if a password is compromised.
We also recommend all of our customers update any malware or antivirus scanners they have employed within their company, and ensure employees and contractors are properly trained on avoiding phishing attacks.
At 20:15 UTC all active sessions have been invalidated. Please follow the steps below to regain access.
Steps to Regain Access
To restore your account, please reset your password by following these steps:
Visit www.linnworks.net
Click on the "Forgot your password" link and follow the instructions.
Enhance Your Account Security
To further protect your account, we strongly recommend enabling Two-Factor Authentication (2FA) for an extra layer of security. For detailed instructions, please refer to our 2FA Setup Guide.
Need Assistance?
If you have any questions or require additional support, our team is here to help. Feel free to contact us at support@linnworks.com