Security expert Troy Hunt hit by phishing attack

Troy Hunt was targeted by a convincing Mailchimp-themed phishing email that allowed attackers to access his account and export about 16,000 subscriber records (email addresses, subscription status, IP addresses and latitude/longitude). Hunt promptly disclosed the incident, changed his password, worked with Mailchimp to revoke the attacker's API key, added the breach to Have I Been Pwned, and advised subscribers to remain vigilant for follow-up phishing attempts.