ClickFunnels Data Breach Impacts 886 Users in the US

Will Gendron
Editor in Chief
Published
July 31, 2024
Updated
August 15, 2024
ClickFunnels Data Breach Impacts 886 Users in the US
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

On July 24, 2024, Etison LLC, operating as ClickFunnels, discovered a significant data breach affecting its platform. The breach was detected when a malfunctioning checkout page was identified. An unauthorized individual gained access to the platform by using login credentials from one of ClickFunnels' third-party contractors. This unauthorized access allowed the individual to inject custom code into the footer script of an Etison webpage.

The breach occurred on July 21, 2024, at 4:36 a.m. Mountain Time and remained active until July 24, 2024, at 3:58 p.m. Mountain Time. During this period, the custom code compromised certain checkout pages, potentially exposing sensitive consumer information.

The types of consumer information exposed include:

  • Name
  • Email address
  • Phone number
  • Physical address
  • Credit card information

In total, 886 individuals in the United States were affected by this breach, including 2 residents from the state of Maine. The breach was publicly disclosed on July 30, 2024, and the company notified consumers electronically on August 1, 2024. The Maine Attorney General's Office has also been informed of the incident.

ClickFunnels's Response

Upon discovering the breach, ClickFunnels promptly activated its Incident Response Plan and initiated an investigation. The company audited its internal records and logs, disabled the compromised contractor’s account, and implemented additional security measures for authorized individuals. The custom script was removed from the affected webpage, and further security enhancements were made to prevent future incidents.

Steps to Take if You Are Affected

If you believe you may have been affected by this data breach, it is crucial to take immediate steps to protect your personal information. Here are some recommended actions:

  1. Order a Credit Report: You are entitled to one free credit report annually from each of the three nationwide credit reporting agencies. Visit Annual Credit Report or call toll-free at (877) 322-8228 to order your report.
  2. Remain Vigilant: Regularly review your account statements for any suspicious activity and monitor your free credit reports.
  3. Report Unauthorized Transactions: If you detect any unauthorized transactions in your financial accounts, promptly notify your financial institution or payment card company.
  4. File a Police Report: If you believe your identity has been stolen, file a police report and obtain a copy to submit to your creditors and other relevant parties.
  5. Place a Fraud Alert: Consider placing a fraud alert on your credit file to protect against potential identity theft. Contact any of the three major credit reporting agencies to set this up:
    1. Equifax (800) 525-6285
    2. Experian (888) 397-3742
    3. TransUnion (800) 680-7289
  1. Consider a Security Freeze: You may also wish to place a security freeze on your credit file to prevent potential creditors from accessing your credit report without your consent. Contact each of the three credit reporting agencies individually to place a freeze.

About Etison LLC dba ClickFunnels

Etison LLC, doing business as ClickFunnels, is a company specializing in computer software. ClickFunnels allows users to create beautifully designed website marketing funnels with just a few simple clicks. For more information, visit their official website.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
Consumers Notification date
August 01, 2024
Date of Breach
Breach Discovered Date
July 24, 2024
Total People Affected
Information Types Exposed

Join the

data breach lawsuit. It's free to join. 

Join the Lawsuit
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image