An account takeover (ATO) in email marketing occurs when a malicious actor gains unauthorized access to a legitimate user's email account. Once in control, the attacker can exploit the account for various nefarious activities such as sending spam, phishing emails, or stealing sensitive information.