On July 24, 2024, Etison LLC, operating as ClickFunnels, discovered a significant data breach affecting its platform. The breach was detected when a malfunctioning checkout page was identified. An unauthorized individual gained access to the platform by using login credentials from one of ClickFunnels' third-party contractors. This unauthorized access allowed the individual to inject custom code into the footer script of an Etison webpage.
The breach occurred on July 21, 2024, at 4:36 a.m. Mountain Time and remained active until July 24, 2024, at 3:58 p.m. Mountain Time. During this period, the custom code compromised certain checkout pages, potentially exposing sensitive consumer information.
The types of consumer information exposed include:
In total, 886 individuals in the United States were affected by this breach, including 2 residents from the state of Maine. The breach was publicly disclosed on July 30, 2024, and the company notified consumers electronically on August 1, 2024. The Maine Attorney General's Office has also been informed of the incident.
Upon discovering the breach, ClickFunnels promptly activated its Incident Response Plan and initiated an investigation. The company audited its internal records and logs, disabled the compromised contractor’s account, and implemented additional security measures for authorized individuals. The custom script was removed from the affected webpage, and further security enhancements were made to prevent future incidents.
If you believe you may have been affected by this data breach, it is crucial to take immediate steps to protect your personal information. Here are some recommended actions:
Etison LLC, doing business as ClickFunnels, is a company specializing in computer software. ClickFunnels allows users to create beautifully designed website marketing funnels with just a few simple clicks. For more information, visit their official website.