PSA - Coda Music emails hacked?

pjf

Just received a very suspicious email from some random address containing a zip attachment (which I won't be opening). A screenshot is below.

As you can see, it looks at first glance like a reply to a (genuine) email I sent Coda in December 2019 - which begins "Hi John". But it's not a reply at all, my email has just been copied into theirs.

I'll get in touch with Coda tomorrow morning but in case anyone else has been affected, please be careful...

punchesjudy

I had 10 fake Coda emails come through to my junk folder yesterday. Every single one was the same loyalty points email just copied with a link that I wasn't going to check. 
So yeah, something is definitely up. 

Jonathangus

@DougCoda ;

PVO_Dave

FYI @DougCoda ;

StefB

punchesjudy said:

I had 10 fake Coda emails come through to my junk folder yesterday. Every single one was the same loyalty points email just copied with a link that I wasn't going to check. 
So yeah, something is definitely up. 

Ditto, on Sunday. 

Stevepage

Yeah same here. Looks like everyone who's ever emailed them is getting these emails.

TINMAN82

Same. I deleted it and blocked the sender.

Teyeplayer

TINMAN82 said:

Same. I deleted it and blocked the sender.

Ditto

DougCoda

Sorry about this, our web guy is looking into it and will get it stopped ..

Habanero

DougCoda said:

Sorry about this, our web guy is looking into it and will get it stopped ..

If it’s any help, the cause of this may not be the server, but one your computers used to access your incoming emails.

This happened in my workplace years ago when a member of staff installed some unauthorised software which contained a Trojan. Even worse, some person then reported our email server to Spamhaus and it took us a few days to get off the blacklists.

Hattigol

DougCoda said:

Sorry about this, our web guy is looking into it and will get it stopped ..

Doug, I had an email offering me that Kauer Banshee for £250 which I have paid. I'll still get this, right? 

Epsilon

Think the problem is ongoing. I just got several emails (sent at around 1am) saying my loyalty points are about to expire with an undoubtedly dodgy link to see more details. Also a nice note saying "send us a word if you need further helps".

punchesjudy

Yep, I've had another five come through. 

DB1

Ah, I’ve had that email this morning at 1.36am. I’m a fairly new customer but would have clicked on that if I wasn’t too lazy.Still, it’s reminded me about my points.

Whitecat

I got 10 of these emails overnight. What’s worrying is that they know my points balance... it’s accurate, other than the fake points they’re telling me are about to expire. 

Edit: nope, I actually got 12 - 2 went to my spam folder.

Wazmeister

To be honest, it would help me out if they’ve been hacked...

If the wife ever clicks my emails (invoices and deals) folder to Doug, I can now deny everything.

Gassage

@DougCoda I got one too

Harsh as it sounds, the email forms a binding offer and I've transferred the £12 for the R9.

Teyeplayer

Gassage said:

@DougCoda I got one too

Harsh as it sounds, the email forms a binding offer and I've transferred the £12 for the R9.

In bitcoin to Prince ******* of [insert chosen state of choice]. He also wishes to advise you that the blessings of good luck have now been conferred upon you.

mgaw

got 3 this morning

Whitecat

If this is indeed a data breach, jokes aside, it would probably be better if we knew what personal data they've got. I think retail breaches are ICO notifiable.

TINMAN82

Didn’t get one this time. Pretty sure I changed my password after this thread started though.