Klaviyo

Klaviyo is an email marketing firm headquartered in the United States. It provides a platform that enables businesses to create, manage, and send email campaigns to their audiences. The service includes tools for building mailing lists, designing messages, and tracking engagement metrics. Klaviyo also supports the storage and use of custom profile properties, allowing customers to segment audiences based on specific data points.

In August 2022, Klaviyo experienced a security breach when attackers obtained an employee’s credentials through phishing. The compromised credentials granted unauthorized access to internal support tools. The threat actors primarily targeted cryptocurrency‑related customer accounts. They exfiltrated marketing lists containing names, email addresses, phone numbers, and custom profile properties from 38 customers. Additionally, two internal lists used for company updates were accessed. Law enforcement was notified and a third‑party cybersecurity firm assisted with the investigation.

Klaviyo’s core offering centers on email marketing with an emphasis on data‑driven segmentation. The platform’s ability to store and utilize custom profile properties enables clients to tailor messages to specific audience attributes. This focus on detailed customer data distinguishes Klaviyo within the email marketing sector. The 2022 incident underscores the importance of securing employee access credentials to protect internal tools and customer data. Klaviyo continues to operate as a provider of email marketing solutions for businesses seeking personalized outreach.