Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Welcome,
We write to inform you of a security accident. Due to the 2FA (2FA) authentication error, an unauthorized user got access to a specific Zapier code warehouses. Usually, this will not affect our customers. From an abundance of caution, we reviewed the contents of the warehouses, and we found that in isolated cases, some customer information was unintentionally copied to the warehouses for the purposes of correcting errors.
We are aware of unauthorized access to warehouses affected on Thursday 27 February 2025 (2025-02-27 09:38:48 UTC). Once we realize this problem, we immediately secured access to warehouses and nullified the unauthorized user’s access. This incident did not affect any Zapier database, infrastructure, production, authentication, or payment systems.
In our audit, we found that a sub -set of your data was included in a warehouse and may have been accessed by the unauthorized user. Here is a safe link for you to access a copy of your affected data.
Please review this data, and take appropriate actions, which may include rotating any valid text authentication symbols that may have been used in places such as the code, or the formation of the Webhook step that is found in the affected data. Note that the ZAP/APP authentication symbols were not affected by this incident. We also recommend a review of safety settings at your Zapier account and other online applications, including 2FA activation when available.
We perform a comprehensive audit and treat our internal operations to ensure that this does not happen again for you or other customers.
If you have any questions, do not hesitate to access us using our contact form on https://zapier.com/app/GET- heelp Or by responding to this email. We stand by any additional help you may need.
sincerely,
Zichan Khatam
Chief of security