CoinTracker data breach: 1.6M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2022-12-12
In December 2022, the Crypto & NFT taxes service CoinTracker reported a data breach that impacted over 1.5M of their customers. The company later attributed the breach to a compromise SendGrid in an attack that targeted multiple customers of the email provider. The breach exposed email addresses and partially redacted phone numbers, with CoinTracker advising that the later did not originate from their service. Exposed data: email addresses, partial phone numbers. The breach dates from Dec 1, 2022; Have I Been Pwned loaded it on Dec 12, 2022.
What to do
- If you had a CoinTracker account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch
