7 Million OpenSea Emails Exposed: Crypto Community on High Alert for Phishing Threats

by

The top cybersecurity official at SlowMist announced that the data breach on OpenSea’s NFT marketplace in 2022, which initially leaked user data, has since become fully accessible to the general public.

The breach, which occurred in June 2022, involved 7 million email addresses of OpenSea users.

Crypto Users at Risk After 7 Million OpenSea Emails Go Public

On January 13, the chief information security officer (CISO) of the blockchain security company, SlowMist, announced in a tweet that the previously leaked email addresses are now publicly available.

As a researcher looking back, I can’t forget the incident involving the OpenSea mail service provider breach in 2024, which unfortunately led to the exposure of numerous email addresses. These leaked emails have since circulated widely. It’s crucial for everyone to be vigilant about the dangers of phishing emails and other cyber threats.

According to a screenshot shared by the exec, former Binance CEO CZ’s emails were also leaked.

In 2022, a security incident occurred at OpenSea due to one of their employees from Customer.io, an email automation provider, allegedly misusing their privileged access to customer data. This employee is said to have passed on this information to an outside entity, resulting in the data breach.

At that moment, OpenSea cautioned its users about potential phishing attempts and urged them to exercise care while dealing with unexpected emails.

Though the data breach occurred about three years back, it was only recently that the exposed data became known to the public. With approximately 7 million email addresses now openly accessible, there’s a greater chance for harmful individuals to carry out phishing attacks. Depending on the extent of the exposure, the leak could also include other personal details.

Although the data breach took place nearly three years ago, it was only recently that the exposed information came to light. Now that around 7 million email addresses are publicly available, there’s a heightened risk of malicious actors launching phishing campaigns. If the extent of exposure is significant, additional personal details might also be at risk.

OpenSea has not issued a direct statement regarding the latest occurrence. However, this event seems to elevate the risk for OpenSea users, even prominent ones with substantial holdings, of falling victim to potential fraudsters.

2024 saw a staggering $500 million in losses due to cryptocurrency phishing scams, impacting approximately 330,000 digital wallets or addresses.

Or:

In 2024, more than $500 million was stolen through cryptocurrency phishing schemes, affecting over 330,000 wallet users.

Or:

Last year, a massive $500 million in losses were reported from crypto phishing attacks, which affected around 330,000 digital wallets.

Each of these sentences conveys the same information but is worded differently for variety and readability.

It seems that hackers are attempting to take over firms’ X accounts with the aim of deceiving users. Recently, Litecoin disclosed that unidentified parties managed to get into their official X account and published false information, such as counterfeit tokens.

Slowsist advises users with potential vulnerabilities to update their passwords and activate two-step verification for all their accounts.

Read More

2025-01-13 14:16