Hackers stole customer data from Celsius Network - Bits Media

Cryptocurrency platform Celsius Network discovered a leak of personal data of its customers through one of the third-party service providers. Some clients of the platform received phishing emails.

According to the letter, posted by Celsius in the media, hackers gained access to "Third party email distribution system", used by Celsius. Attackers used this information to send fraudulent emails and messages to Celsius customers, to trick them into revealing the private keys to their cryptoassets.

"14th of April 2021 of the year Celsius customers began to report the appearance of a fraudulent website, which approved, that this is the official platform of Celsius. We also learned, that some Celsius customers have received SMS and e-mails, which asserted, that this is an official message from Celsius with a link to a fraudulent website, where users were prompted to enter confidential information ", - the letter says.

According to the company, hackers managed to gain access to a backup third-party email distribution system, which was connected to the clients' partial email list. Once inside the system, scammers sent messages to some Celsius customers.

Screenshot of one of the phishing messages, sent to Celsius customers.

Celsius team investigating the incident, to find out, how hackers got access to customer phone numbers, Considering, that the hack occurred in the email management system. Remarkably, that Celsius customers report receiving phishing messages to phone numbers, which they never provided to Celsius.

Rival Celsius BlockFi suffered from a similar data breach last spring. In July 2020 of the year Ledger reported hacking its marketing database, which led to the release of a million emails and some personal documents of clients. The compromised database was later put up for sale online., and people started to complain about fraudulent emails.