MailChimp, Mailgun, and Sendgrid API leak endangered over 54m users

Leaked API keys of three popular email service providers allowed threat actors to perform various unauthorized actions such as sending emails, accessing mailing lists and personal data, deleting API keys, and modifying two-factor authentication, hence putting 54 million users at risk. Email marketing companies provide users with various services, like sending, validating, and receiving emails through their domain, creating emails and email campaigns, and tracking the performance of marketing campaigns. The email service providers use a piece of software called API (Application Programming Interface) to allow their applications to communicate across various platforms without human intervention. An API key is a unique identifier user, developers, or calling programs utilize to authenticate themselves.

https://cybernews.com/security/mailchimp-mailgun-and-sendgrid-api-leak/