Dear Crescendo Lab partners,
Due to the detection of abnormal activities involving a single account and IP address on 2024/08/03, the Crescendo team has followed ISO27001 information security emergency procedures and consulted with professional advisors to address the issue in order to fully protect the personal data and account security of the entire brand and its consumers and users.
We understand that some measures taken might affect your use of the MAAC/CAAC platform functions and Open API. However, for overall security considerations, please cooperate with the guidelines provided. We will do our best to assist you in using the MAAC/CAAC platform functions normally!
Below are the detailed measures related to your platform operations:
Measure 1: On 2024/08/04 at 00:47 am, a system update will prompt users to reset their passwords.
If you have a MAAC platform account or both MAAC & CAAC platform accounts (users with only CAAC platform accounts do not need to reset), the system will guide you to reset your password upon re-login. Please ensure to set a completely new password and do not use your old password.
Note: The password you set cannot be known or decrypted by anyone else (including the Crescendo system, which has no access rights). Please ensure that only you have access to your account to prevent unauthorized login activities.
To reset your password:
- Click https://maac.cresclab.com/forget.
- Enter your email registered with MAAC.
- Check your inbox for the verification email.
- Click the link (valid for 24 hours).
- Reset to a new password (8 characters, must include both numbers and letters).
If you do not receive the verification email, please refer to this https://cresclab_cs.pse.is/6aj36x.
Measure 2: On 2024/08/04 at 01:15 am, the system restricted the import/export functions related to contacts on the MAAC platform and OpenAPI.
We restricted the following functions on 2024/08/04 at 01:15 am. After the information security department confirmed there were no security concerns, these functions were gradually restored:
- MAAC Open API: Get/Import Contact List, CDH Open API Import/Export Member (restriction period: 2024/08/04 01:15 am - 2024/08/04 12:30 pm)
- MAAC platform functions: Contact Information Page, Contact Import/Export, Segmentation Export, Awards Export (restriction period: 2024/08/04 01:15 am - 2024/08/04 05:04 pm)
Measure 3: The team plans to implement a 2FA login authentication mechanism and content review mechanism for LINE and SMS messages.
To enhance security, the team is planning to develop a two-factor authentication (2FA) login mechanism and content review mechanisms for LINE and SMS messages to ensure that each user can prevent unauthorized and unsafe login activities and to prevent malicious individuals from spreading fraudulent information.
Thank you for your understanding, cooperation, and patience. If you have any concerns or questions, or if you need further assistance regarding the above measures, please contact the Crescendo Lab team. Thank you!