According to SlowMist’s chief information security officer (CISO), known as @im23pds on X, more than 7 million email addresses from OpenSea’s 2022 data breach have now been made fully public.
The CISO of SlowMist stated in a January 13 post on X, "Remember the attack on the OpenSea mail service provider in 2022 that led to the leakage of emails? The leaked email addresses have now been fully publicized after multiple dissemination".
This development raises new concerns about phishing and scams targeting individuals involved in cryptocurrency and non-fungible tokens (NFTs).
Did you know?
Subscribe - We publish new crypto explainer videos every week!
What is Ethereum 2.0? Upgrades Easily Explained With Animations
@im23pds noted that the database includes emails of many figures and organizations in the cryptocurrency industry, which could make them targets for sophisticated attacks.
The breach originated in June 2022, when OpenSea disclosed that an employee of their email vendor, Customer.io, had leaked customer email addresses to an external party.
At the time, OpenSea warned users, “If you have shared your email with OpenSea in the past, you should assume you were impacted. We are working with Customer.io in their ongoing investigation, and we have reported this incident to law enforcement”.
To protect against potential threats, @im23pds advised affected users to create strong, unique passwords and use a password manager to store them securely.
Enabling two-factor authentication (2FA) is another key step, with a preference for authentication apps over SMS-based 2FA for added security. Keeping software updated on all devices is also essential to minimize vulnerabilities.
Meanwhile, a hacker known as "Blockchain Bandit" recently made a move after two years of inactivity. What did the hacker do? Read the full story.