Epsilon Apologizes as Search Is On for Data Thieves

Epsilon’s president has offered an apology after a hacking into the company’s email system led to the theft of many names and email addresses.

Noting that the theft of data was limited to email addresses and customer names, Bryan J. Kennedy, president of Epsilon, said in a statement that the company was “extremely regretful that this incident has impacted a portion of Epsilon's clients and their customers.”

“We take consumer privacy very seriously and work diligently to protect customer information," Kennedy added. "We apologize for the inconvenience that this matter has caused consumers and for the potential unsolicited emails that may occur as a result of this incident. We are taking immediate action to develop corrective measures intended to restore client confidence in our business and in turn regain their customers' confidence."

No social security numbers, credit card numbers or account information were lifted by the hacking, the company said.

Epsilon added it is working with authorities and experts to find out who is responsible and will implement increased security in its email system. About 2 percent of Epsilon’s client base was impacted.

In addition, Ed Heffernan, CEO of Epsilon’s parent company, Alliance Data (News - Alert), called the hacking “malicious” and said it was done “by highly sophisticated cyber-thieves."

Epsilon and Alliance Data are concerned about losing any “valued clients.”

The incident was discovered on March 30, according to a company statement.

The incident led to many warnings being sent out to the public. For example, TMCnet reports that Maryland Attorney General Douglas F. Gansler called it a “serious breach potentially affecting many Marylanders.”

In a recent statement he recommends:

* Consumers should be wary about providing personal information or clicking on any links in emails.

* Users should enter a website address manually.

* They should not click a link in an e-mail.

* They should use a phishing filter.

* Most organizations do not ask for personal or financial information through e-mail.

* Call an organization or a business if a suspicious e-mail was received from them.