Celsius, the insolvent crypto lending firm, cautioned its depositors about potential phishing attempts after it was proven that one of the employees responsible for data administration and customer messaging had disclosed emails containing client information.
https://twitter.com/CelsiansNetwork/status/1552737193407533057?s=20&t=fJZrwViC65hGhUAWUL0Ijg
Celsuis ensures that the leak presents no high risk to clients.
Celsius confirmed that the person who disclosed sensitive client information to a third party is an engineer at the Customer.io messaging platform. After the incident became public, the corporation fired that employee.
“We were recently informed by our vendor Customer.io that one of their employees accessed a list of Celsius client email addresses,” said Celsius in its email to customers.
Although data invasion has been detected on the DeFi platform before, this is not the first instance. Outstanding NFT platform OpenSea issued recommendations concerning email breaches in June as a warning to its customers.
In an effort to assuage clients’ anxiety over occurrences, Celsius has made sure that there are no present high risks to its clients. The announcement’s only goal is to alert users about potential phishing fraud.
“We do not consider the incident to present any high risks to our clients whose email addresses may have been affected, but are releasing this communication to make sure you are aware.” they wrote on twitter.
https://twitter.com/CelsiansNetwork/status/1552737196364513280?s=20&t=fJZrwViC65hGhUAWUL0Ijg
Customer.io previously wrote in a blog post, “We know this was a result of the deliberate actions of a senior engineer who had an appropriate level of access to perform their duties and provided these email addresses to the bad actor.”
The company withheld information on the platform utilized for this malfeasance as well as the precise quantity of emails that were exposed.
Users of Celsius were also victims of phishing attacks last year when numerous websites appeared to be genuine Celsius platforms in an effort to trick its users. In order to obtain consumers’ vital information, some of these fraudulent websites also send them SMS and emails.
According to the screenshots shared by Celsius users, the only client data leaked to bad actors is a list of email addresses with no other personally identifying information (PII).
Celsius reportedly does not foresee any major threats to further client data security. However, the team has nevertheless warned users to be on their guard and to contact Celsius support if affected.
