Tracker comany Chipolo has apparently been pwned. How do I know this? I was sent an email telling me that they’ve been pwned:
We’re writing to let you know about a recent data security incident at our third-party order fulfillment partner that involved some of the information related to your Chipolo order.
What happened?
Our fulfillment partner recently notified us that an unauthorized party had exploited a vulnerability in a third-party analytics tool they use, gaining access to parts of their system. This was not a breach of Chipolo’s own systems, and it did not involve any weakness in Chipolo devices or the Chipolo app. Since being notified, our partner’s team has patched the vulnerability, blocked the unauthorized access, and launched a thorough investigation with external cybersecurity experts.
What information was involved?
Because this partner handles the shipping of our products, the accessed data included your:
- Name, email address, and telephone number
- Shipping address
- Order details (such as order number and order total)
Please be assured that your credit card number, security code (CVV), and passwords were NOT exposed. Chipolo does not share payment information with our fulfillment partner as part of order processing, so no payment data was involved in this incident.
Why are we telling you this?
While your highly sensitive financial data is safe, scammers can sometimes use shipping and order information to send convincing phishing (scam) emails or text messages. We are sending this notice so you can be on alert for any suspicious communications pretending to be from Chipolo or a delivery courier.
A few tips to stay safe:
- Don’t click suspicious links: If an email or text message about a delivery feels off, it probably is.
- Check the “From” address: Scammers often use names that look official but have strange email addresses. If it doesn’t end in @chipolo.net, it’s not from us.
- Verify the request: We will never ask you to provide payment details or personal information via a random email to “complete a delivery” or “verify an order.”
- Trust your gut: Phishing emails often create a false sense of urgency (like “Act now or your package will be returned!”). Double-check everything before acting.
- Reach out to us: If you’re unsure about any communication, our team is ready to help. You can simply reply to this email.
We’re truly sorry for the worry and inconvenience this might cause.
Clearly this was a third party hack which underscores the fact that you are only as secure as the third parties that you deal with. Organizations should really do something about that so that they are not victims of third party hacks. In any case, I am sure that we will find out more about this hack as nobody seems to have coverage about it at present and details are sure to come out. In the meantime, I would be very careful about what hits your inbox and what you do with it as clearly someone wants your data.
Related
This entry was posted on August 17, 2026 at 8:55 am and is filed under Commentary with tags Hacked. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Chipolo Seemingly Pwned
Tracker comany Chipolo has apparently been pwned. How do I know this? I was sent an email telling me that they’ve been pwned:
We’re writing to let you know about a recent data security incident at our third-party order fulfillment partner that involved some of the information related to your Chipolo order.
What happened?
Our fulfillment partner recently notified us that an unauthorized party had exploited a vulnerability in a third-party analytics tool they use, gaining access to parts of their system. This was not a breach of Chipolo’s own systems, and it did not involve any weakness in Chipolo devices or the Chipolo app. Since being notified, our partner’s team has patched the vulnerability, blocked the unauthorized access, and launched a thorough investigation with external cybersecurity experts.
What information was involved?
Because this partner handles the shipping of our products, the accessed data included your:
Please be assured that your credit card number, security code (CVV), and passwords were NOT exposed. Chipolo does not share payment information with our fulfillment partner as part of order processing, so no payment data was involved in this incident.
Why are we telling you this?
While your highly sensitive financial data is safe, scammers can sometimes use shipping and order information to send convincing phishing (scam) emails or text messages. We are sending this notice so you can be on alert for any suspicious communications pretending to be from Chipolo or a delivery courier.
A few tips to stay safe:
We’re truly sorry for the worry and inconvenience this might cause.
Clearly this was a third party hack which underscores the fact that you are only as secure as the third parties that you deal with. Organizations should really do something about that so that they are not victims of third party hacks. In any case, I am sure that we will find out more about this hack as nobody seems to have coverage about it at present and details are sure to come out. In the meantime, I would be very careful about what hits your inbox and what you do with it as clearly someone wants your data.
Share this:
Like this:
Related
This entry was posted on August 17, 2026 at 8:55 am and is filed under Commentary with tags Hacked. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.