Hackers hit HSN, other companies

Home shopping giant HSN is notifying customers across the country that hackers have stolen some of their private data, and a string of other major companies may have to start sending out similar alerts.

HSN officials say they learned of the breach on Friday and began notifying customers on Saturday via email. The breach began at a third-party contractor called Epsilon that HSN hired to send marketing messages.

The customer information involved is limited to first name and last names and email addresses - not financial information or Social Security numbers, company officials say.

"Although HSN's databases were never compromised, customer trust is extremely important to HSN," the company said in a statement. "Therefore, we felt it was important to notify our customers of this incident as soon as possible. We regret any inconvenience to our customers and have shared with them a number of email precautions to help ensure their privacy online."

The company warned customers they may start receiving unsolicited spam email as a result of the breach.

"HSN would never ask you to email personal information, such as credit card numbers or Social Security numbers," the company advised customers. "If you receive such a request, please do not respond, click on any links, or download any attachments."

Epsilon sent its own statement on Friday about the breach, but did not name companies involved. The technology magazine SecurityWeek reported on the breach over the weekend and named the companies involved, including Kroger, TiVo, U.S. Bank, JPMorgan Chase, Capital One, Citi, McKinsey & Company, Ritz-Carlton Rewards, Marriott Rewards, New York & Co, Brookstone, Walgreens and The College Board.

Citi sent a Twitter message to its followers over the weekend warning them against possible email scams and directing them to a company site for more information about the breach.