Celsius Enables Altcoin to BTC and ETH Conversion After SEC Negotiations, Commencing July 1
Celsius' $800M Ether Staking Disruption Extends Ethereum Validator Queue to 44 Days
USBTC Sets Sights on Becoming Bitcoin Mining Powerhouse Following Acquisition of Celsius Assets
After the company said that some of its customers' information had been leaked in a third-party data breach, Celsius depositors should be on the lookout for phishing scams.
On Tuesday, Celsius sent an email to its customers telling them that an employee of one of its business data management and messaging vendors had leaked a list of their emails.
Celsius says that the breach was caused by an engineer at the Customer.io messaging platform who gave the information to a bad actor from the outside.
In an email to customers, Celsius said, "Our vendor Customer.io just told us that one of their employees looked at a list of Celsius clients' email addresses." The data breach is part of the same attack that exposed the email addresses of OpenSea customers in June.
Announcement from Celsius: “We are writing to let you know that we
— Celsians (@CelsiansNetwork) July 28, 2022
were recently informed by our vendorhttps://t.co/452EROQtbc that one of their employees
accessed a list of Celsius client email
addresses held on their platform and
transferred those to a third-party.”
Celsius has played down the incident, saying that it did not "present any high risks to our clients" and that they just wanted users to "be aware."
In a blog post on July 7, Customer.io said, "We know this was done on purpose by a senior engineer who had the right level of access to do their job and gave these email addresses to the bad actor." Since then, the employee has been fired.
Nobody said how many emails were leaked, nor did they say where they were leaked.
But the crypto community has started to warn Celsius users about phishing attacks, which usually happen after a breach of email data.
Phishing is a type of social engineering in which people are tricked into giving out more personal information or clicking on links to malicious websites that install malware to steal or mine cryptocurrency.
⚠️ Celsius users should expect phishing emails along the lines of "Verify your wallet to withdraw your funds" that will phish for your SRP/PKey due to this
— harry.eth 🦊💙 (whg.eth) (@sniko_) July 28, 2022
Remember, your SRP should only be known to you and you only https://t.co/QYuDhEE7aL
In April 2021, a fake website claiming to be the official Celsius platform is said to have targeted Celsius customers who had their information stolen in a similar way. Some people got text messages and emails asking them to give out personal information and "seed phrases."
At the time, the company said that hackers had gotten into a third-party system it uses to send emails.
The servers of Ledger, a company that makes hardware wallets, were hacked in 2020. This may have been the most well-known crypto data breach. Personal information about thousands of customers was posted on the internet, causing a lot of damage and even physical threats to some of the victims, but the company refused to pay them back.
