OpenSea Email Leak: Over 7 Million User Emails Now Public, Exposing Crypto Users to Increased Phishing Scams

Getting your Trinity Audio player ready...

In a concerning development, over seven million email addresses compromised in a 2022 OpenSea data breach have recently been fully exposed online, heightening the risks of phishing scams. The leak, which originally occurred in June 2022, was the result of an attack on OpenSea’s email vendor, Customer.io, and it involved a vast number of email addresses, many belonging to prominent figures in the cryptocurrency space.

According to 23pds, Chief Information Security Officer at SlowMist, the compromised data has now been “fully publicized” after multiple disseminations. In a post on X, 23pds warned that this new exposure would likely lead to a surge in phishing attempts and scams, with attackers exploiting the leaked information to target victims in a new wave of cybercrimes.

Screenshot of a Dec. 26 Telegram post containing the leaked email addresses as an attachment. Source:  23pds/SlowMist

The compromised email list, which includes email addresses from well-known cryptocurrency practitioners, companies, and key opinion leaders (KOLs), had previously been kept private. Now, as it circulates online, scammers have an opportunity to launch more sophisticated phishing attacks targeting the crypto community.

Source: 23pds

OpenSea had first alerted customers to the breach in June 2022, confirming that an employee of Customer.io had leaked the data to an external party. The company advised customers who had shared their email with OpenSea to assume they were affected by the breach. OpenSea also collaborated with Customer.io and reported the incident to law enforcement at the time.

To protect against potential phishing scams, 23pds recommends users take immediate precautions. These include creating strong, unique passwords, utilizing password managers, and enabling two-factor authentication (2FA). He also advises using an authenticator app rather than SMS-based 2FA and ensuring that device software is up-to-date.

Also Read: OpenSea Sparks Buzz with OCEAN Token Teaser: A Game-Changer for the NFT Market?

Phishing remains one of the most significant cybersecurity threats of 2024, with attackers already having stolen over $1 billion in digital assets through 296 incidents, according to CertiK. As this new data leak circulates, the potential for scams and fraud in the crypto community is only set to increase.

Disclaimer: The information in this article is for general purposes only and does not constitute financial advice. The author’s views are personal and may not reflect the views of Chain Affairs. Before making any investment decisions, you should always conduct your own research. Chain Affairs is not responsible for any financial losses.