CoinGecko reports data breach caused by third party email provider, exposed 23k people
Learn More
CoinGecko, a cryptocurrency data aggregator, has reported a data breach impacting its third-party email management platform, GetResponse. The incident was disclosed following reports of new crypto airdrop scams.
On June 5, 2024, attackers compromised a GetResponse employee's account, allowing them to export the contact information of 1,916,596 CoinGecko users. The exposed data includes:
- Names
- Email addresses
- IP addresses
- Locations of email opens
- Metadata such as sign-up dates and subscription plans
The attacker leveraged the compromised account to send phishing emails, totaling 23,723, to addresses from another GetResponse client’s account. The phishing emails aimed to steal sensitive information such as crypto wallet private keys through address poisoning scams.
CoinGecko claims that the user accounts and passwords on the platform remain secure.
CoinGecko has actively engaged with GetResponse to investigate the breach. Affected users have been notified, and the company is reviewing its security procedures to prevent future incidents.
To mitigate risks, CoinGecko advises users to:
- Verify the authenticity of emails
- Enable two-factor authentication (2FA) on crypto platforms
- Avoid clicking on links or downloading attachments from unsolicited emails
- Be cautious of emails offering token airdrops
