It was reported that maropost.com was hosting client records in an unsecured database. This website allegedly was loading maropost.com assets at the time of compromise as reported by https://publicwww.com/websites/maropost.com/ with the encrypt snippet https://nucific.com/;78941;action=\https://api.maropost.com/accounts/518/forms/