Cyber Liability—Over 100 Million DocuSign Customer E-mails are Hacked

I have personnally recieved 2 bogus e-mails from "Dousign.com" this morning.  If you look below, this is part of what one of the e-mails looks like.  DocuSign has about 200 million users and has been embraced as a quick and secure way to sign contracts and other official documents using even a finger on a mobile device.  Leading Lenders and Insurance Carriers rely on DocuSign to electronically transmit executed contracts and other sensitive documents that need to be signed.  Trusting the DocuSign process is paramount to their success.  Many businesses including Law Firms, Accounting Firms, and Title Agencies frequently rely on DocuSign Documents conduct business.  According to Forbes over 100 million e-mails may have been stolen.

Fake Phishing Messages have started to appear that purportedly come from DocuSign.  They are being sent from non-DocuSign Domains such as Docus.com and have misspellings in the document.  The company said the Phishing emails imitated the DocuSign brand to trick recipients into opening a Microsoft Word document containing malicious software.

The following is part of what one of the fake e-mails look like, It is from David Wallace via DocuSign <dse@dousign.com>.  Notice that the domain is not Docusign.

Do Not Share This Email
This email contains a secure link to DocuSign. Please do not share this email, link, or access code with others.

About DocuSign
Sign documents electronically in just minutes. It's safe, secure, and legally binding. Whether you're in an office, at home, on-the-go -- or even across the globe -- DocuSign provides a professional trusted solution for Digital Transaction Management™.

Questions about the Document?
If you need to modify the document or have questions about the details in the document, please reach out to the sender by emailing them directly or replying to this email.

If you are having trouble signing the document, please visit the Help with Signing page on our Support Center.