Crypto data aggregator CoinGecko has experienced a severe data breach that led to the leak of personal details of approximately 2 million users.
In an announcement made by the Singaporean firm on June 8th, it was revealed that its email marketing platform, GetResponse had been breached by an unauthorized third party.
Based on what was disclosed in CoinGecko’s statement, the attacker managed to compromise a GetResponse employee’s account on June 5th. This allowed them to export a staggering 1,916,596 user records from CoinGecko’s database, including names, email addresses, IP addresses, and location data linked to email opens.
However, despite this breach of security, users’ accounts and passwords still remain untouched, but the scammer used another client account from GetResponse to send over 23,700 phishing emails in an effort to entice victims into cryptocurrency scams or any malicious schemes.
“We are actively investigating this situation with GetResponse and informing all affected users.,” said CoinGecko who stressed its commitment not only to improving security protocols among vendors but also enhancing them along with vendors.
CoinGecko as a reliable source for crypto data and analytics might lead to a major blow to the platform’s credibility as it attracts millions of visitors every month.
Also Read: Bakkt Holdings Considers Breakup Amid Financial Challenges