SAN FRANCISCO — Walgreen Co., McDonald’s and Twitter reported unrelated data breaches Monday.

Walgreen said hackers who gained access to a list of customer e-mail addresses may have sent spam directing customers to enter personal data into outside websites.

McDonald’s said private information that customers supplied when signing up for online promotions or subscriptions was exposed when a subcontractor improperly handled the data.

And Twitter said hackers broke into an unspecified number of its users’ accounts and sent spam promoting acai berry drinks.

Twitter said the hackers used passwords harvested in an earlier breach at Gawker Media, which runs Gawker, Gizmodo and other technology and media sites. Gawker warned subscribers Sunday that its database had been hacked and urged them to change their passwords. Twitter reset passwords it suspects were compromised.

Twitter said only a small share of its 175 million users were affected, though it didn’t know how many.

Advertisement

The breach highlighted the danger in using a single password for multiple online accounts.

Attacks via networking sites like Twitter and Facebook are popular because they can make spam look as though it was sent by friends, but the effect is similar when spam or data-seeking e-mail seems to come from a trusted merchant.

Walgreen would not say how many customers were affected, but told customers that no personal information beyond e-mail addresses was exposed.

Both McDonald’s and Walgreen reminded customers they do not seek personal or financial information by e-mail and cautioned against ever responding to such requests.

 


Only subscribers are eligible to post comments. Please subscribe or login first for digital access. Here’s why.

Use the form below to reset your password. When you've submitted your account email, we will send an email with a reset code.