Exchange Server Compromised

(De Pere, Wisconsin) On Friday, March 12, 2021, along with tens of thousands of other Microsoft customers, our Exchange server was compromised using the recently publicized vulnerabilities of the MS Exchange environment. This server supports email activity for all of our product line domains including: campbellwrapper.com; parsons-eagle.com; circlepackaging.com; hassia-redatronusa.com; effytecusa.com and junapack.com. To mitigate further exposure and risk, our server was removed from the internet on Friday, March 12th at 1:00 pm Central Standard Time.

We were able to rebuild the server to a functional and secure system by Monday morning, March 15th. That rebuilding effort re-enabled us to securely communicate and support our valued customers.

Since the time of incursion we are aware of isolated cases of attempts to exploit email addresses contained within our Exchange server database. These attempts include phishing emails and other related techniques intended to extract private information from the recipient.

The purpose of this email is to notify you that our Exchange server has been compromised and that our Exchange server has been completely rebuilt and is secure, but email addresses within our Exchange server may have been compromised, and that you may be receiving “spoofed” phishing emails from what appear to be your regular contacts at Campbell Wrapper, Parsons-Eagle, Circle Packaging, Junapack, Hassia-Redatron USA or Effytec USA. If you suspect anything of this nature, please forward the details of your phishing emails to the following email address so we can investigate.

ExchangeExploit2021@CampbellWrapper.com
 
We will continue to monitor the situation and provide updates as they become available.

Sincerely,
Campbell Wrapper Corporation