OpenSea Email Leak Exposes Over 7 Million Addresses to Public

Over seven million email addresses from a 2022 OpenSea breach have been leaked publicly, increasing the risk of phishing and scams. This information was revealed by SlowMist’s Chief Information Security Officer on January 13.

  • The breach occurred in June 2022 when an employee of Customer.io accessed and shared users' emails without authorization.
  • OpenSea had already informed users to consider their data compromised following the incident.
  • The leak now includes emails from notable figures and companies in the crypto sector, raising concerns about targeted phishing attacks.
  • Previous breaches, such as the 2020 Ledger incident, highlight ongoing data security challenges in the cryptocurrency industry.
  • Cybersecurity firm CertiK reported over $1 billion lost to phishing scams in 2024.
  • More than 250 breaches or leaks affected major platforms like https://holder.io/coins/binance/, Crypto.com, and eToro in the first half of 2024.

SlowMist's 23pds recommends users create strong passwords and stay alert for unsolicited communications to mitigate risks.