Poppins/Metabase breach

[u/SnooFoxes1558]

Affected Poppins parents, I wonder how your day has been.

There was a post 11 days ago about this data breach. Those working in IT understood the gravity but others shrugged at it or accused me of being a “sales person” for some lawyers.

Today I suddenly got 10 calls and sms on my phone, all by loan sharks trying to sell me loans. Pretty aggressively insisting that I should take their offers. One mentioned that I had “applied at LendingTree.com for a loan” - i had never heard of that website before.

I have the bad feeling this is just the tip of the iceberg. I need to lock down everything and I suggest all other affected to do the same.

If you’re wondering about suspicious activity lately - this breach is the reason why.

[u/utahnow]

did poppins notify you of this breach? i don’t think i got anything

[u/SharpButterfly7 → u/utahnow]

I am a Nanny and I got a letter. Honestly, it really scared me! I have all my credit reports frozen right now. I don’t know what else to do to protect myself.

[u/utahnow]

did poppins notify you of this breach? i don’t think i got anything

[u/zipmcnutty → u/utahnow]

We got letters recently from poppins about the breach so they are definitely notifying folks.

[u/SnooFoxes1558 → u/utahnow]

Yes I got a letter

[u/SnooFoxes1558 → u/utahnow]

Which state are you in? I’m in MA. I wonder if laws are different by state and in yours they didn’t have to send this

[u/utahnow → u/SnooFoxes1558]

I am in Utah… neither me or my nanny got it may be it’s still in the mail. Or may be we weren’t in the breach.

[u/16th_Century_Prophet → u/utahnow]

I and our nanny were notified in Chicago

[u/Witty_Kangaroo_4276]

Its a nightmare. My credit was already frozen thankfully. I got a new bank account number and am working through all that entails and setting up new payroll, which is a nightmare because poppins doesn’t provide documentation that you need to set up new payroll. They setup my state tax account for me without making me an administrator or providing any information or documentation about the account so I spent NINE hours yesterday working with the state to get control of my own business tax account

[u/SnooFoxes1558 → u/Witty_Kangaroo_4276]

Ugh. So much about saving time with payroll 😅

[u/AutoModerator]

Users please be mindful of the flair the OP selected.

Post flaired as "NP only" indicate that this topic is only to be commented on by other nanny parents/employers.

Posts with the flair "All Welcome" are open for anyone to comment.

Disrespecting this rule will lead to your comment being deleted.

Numerous infractions may result in a ban from the subreddit.

If you are a nanny and wish to discuss this topic, you are encouraged to make your own post.

If you are the OP and you wish to change your flair, please message using modmail.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/neejoub]

We put freezes on all our accounts. Super frustrating.

[u/SnooFoxes1558 → u/neejoub]

Yeah I got spooked today and did that plus closed the connected bank account and opened a new one with a new nr

[u/neejoub → u/SnooFoxes1558]

Yup same. Better safe than sorry

[u/Head-Replacement-460]

I got a letter and this is scary

[u/UnlikelySprinkles181]

I’m a nanny and I received the letter. I’m in DC. They offered for a year of credit watch I think they legally obligated to do so

[u/SnooFoxes1558 → u/UnlikelySprinkles181]

Yeah - that's like the absolute minimum to cover their asses legally.

I'm still not over the fact that the combination of my name, ein, ssn, and bank account number were exposed combined in a freakin dashboard software.

It violates every imaginable IT security best practice and sounds like a sloppy vibe coder built this software in Lovable.