Remember last week when TripAdvisor let members know that their database of email addresses had been compromised ?
Retailer New York & Company and TiVo sent nearly simultaneous, nearly identical emails to subscribers today conceding their email address databases too have been hacked. Subscribers of HSN, US Bank and Benefit Cosmetics also report similar email warnings- the breaches stem from a larger “massive breach” at permission-based email marketing provider Epsilon, and the list of affected companies so far is as follows:
• TiVo
• Marriott Rewards
• Ritz-Carlton Rewards
• US Bank
• JPMorgan Chase
•Capital One
• Citi
• McKinsey & Company
• New York & Company
• Brookstone
• Kroger
• Walgreens
In part, New York & Company explained:
Please note, it is possible you may receive spam email messages as a result. We want to urge you to be cautious when opening links or attachments from unknown third parties. We also want to remind you that we will never ask you for your personal information in an email.
We sincerely regret this has taken place, and we apologize for any inconvenience this may have caused you. We take your privacy very seriously, and we will continue to work diligently to protect your personal information.
Given the number of companies affected so far, it is likely at least a handful more will emerge and reach customers. Have you received a similar email from a company not on the list? Have you noticed an increase in spam following such notifications?


