Phishing emails sent via PostHog invite system

We are investigating reports of an attacker abusing PostHog's invite process to send phishing emails. The emails use our standard invite template but contain a link directing to a malicious external site. If you received an unexpected PostHog invite email between April 22–24, do not click any links in it. Fewer than 0.03% of the targeted email addresses matched records in our database, suggesting it is unlikely this list originated from a PostHog data leak. We have found no evidence of a compromise of PostHog systems and have deployed a fix to prevent similar attacks.

We've deployed a fix to prevent further abuse of our invite process following reports of phishing emails sent using it. The attacker has been blocked and we are monitoring for further activity. We have found no evidence of a compromise of PostHog data or systems. If you received an unexpected PostHog invite email between April 22–24, do not click any links in it.