Celsius Admits Customer Emails Leaked In Third-Party Data Breach

Customers are ticked off by another snag with bankrupt crypto lender Celsius

article-image

Blockworks exclusive art by axel rangel

share

key takeaways

  • The same data breach that affected OpenSea has affected Celsius
  • Customer.io removed its employee responsible for email leaks

Celsius users — look out for phishing attacks. 

The cryptocurrency lender has warned customers that a data breach led to their emails being leaked.

Late Thursday, Celsius emailed users informing them that an employee at its email delivery vendor Customer.io accessed a list of client addresses and sent them to an unauthorized party.

The embattled firm said it didn’t consider the incident to pose “high risks,” and had been informed that no other Celsius-related data was compromised beyond identified email addresses. 

Loading Tweet..

About a month ago, collectibles platform OpenSea warned users that their email addresses were compromised in a similar leak. Customer.io was responsible for that incident too, since one of its employees abused their access. The vendor said that the employee responsible had been terminated, had all access removed and was reported to law enforcement.

Celsius, aware that Customer.io was one of its vendors, said it proceeded to remove data held with the firm after the OpenSea episode. At the time, the vendor found no Celsius data involved in the breach. 

But on July 8, Celsius was notified that it too had been affected by the same offender. In a statement, Customer.io confirmed five clients apart from OpenSea were impacted by the email leaks. “We do not expect to learn any additional information since this incident resulted from the actions of a single employee, who had legitimate access to these email addresses as part of the employee’s job,” it added.

Celsius customers took to Twitter to express frustration over a stream of trouble they’ve had to face with the lender. 

Loading Tweet..

The firm is dealing with restructuring its assets after filing for bankruptcy on July 13. A court document shows Celsius has $5.5 billion in liabilities and $4.3 billion in assets, leaving it with a $1.2 billion hole on its balance sheet.

And while Celsius has been quick to downplay the risk to its users, similar data breaches have shown that affected users have actually lost funds due to phishing attacks. 

When hardware wallet manufacturer Ledger suffered a data leak of its marketing database in July 2020, its users were targeted with devious scams designed to steal their cryptocurrencies.

Shopify, the e-commerce giant that Ledger used to sell its wallets, also came under attack from users for “repeatedly and profoundly” failing to protect customer identities. Both firms were sued in April after victims lost some of their crypto assets.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the Forward Guidance newsletter.

Get alpha directly in your inbox with the 0xResearch newsletter — market highlights, charts, degen trade ideas, governance updates, and more.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 18 - 20, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Unlocked by Template.png

Research

RTK networks are critical to enabling a world of ubiquitous autonomous drones, vehicles, and industrial robots. We believe the GEOD token enables both a cost and product advantage for the GEODNET RTK network, which will allow it to out-compete multi-billion dollar incumbents Trimble and Hexagon.

article-image

Senator Cynthia Lummis hopes a US strategic bitcoin reserve can be teed up for “adoption in 2025”

article-image

As EIP-4844 “blobs” transform the economics of Ethereum layer-2s, a growing debate pits long-term scalability against immediate ETH value

article-image

Prosecutors argued that FTX co-founder Gary Wang cooperated in their case against former FTX CEO Sam Bankman-Fried

article-image

The two largest crypto exchanges respectively run the second- and sixth-largest Solana validators

article-image

MicroStrategy’s bitcoin buying has exploded — it now holds 1.7% of the asset’s circulating supply

article-image

The MiCA era will reward the prepared and punish the rest