7,000 MetaMask Users Targeted in Security Breach, ConsenSys Says

Fraudsters targeted one of MetaMask’s third-party service providers to gain access to personal data such as email addresses

article-image

sdx15/Shutterstock modified by Blockworks

share

Thousands of MetaMask users who contacted customer support over an 18 month period were targeted in a personal data breach, ConsenSys said Friday. 

An estimated 7,000 individuals had private information, such as email addresses, compromised between August 2021 and February 2023, the blockchain software firm said in a blog post. MetaMask’s browser extension and mobile app users were not impacted, according to ConsenSys.

Fraudsters targeted a third party service provider MetaMask uses to create customer support tickets, ConsenSys said, which is how the personal data was seized. 

“The incident occurred when unauthorized actors gained access to the third-party service provider’s systems,” ConsenSys said in the post. “As a result of this incident, MetaMask users who submitted personal data to our customer support may have had that data accessed by an unauthorised third party.” 

Compromised data mostly includes “limited” personal information needed to identify customers for support needs, the company said, but users could have shared additional information in the chat function that was seized. 

ConsenSys has stopped the unauthorized access, it said, and the threat is no longer ongoing. Affected users may be targeted in future phishing scams however, the company acknowledged, noting that customers should be aware of potential threats. 

“As always, we ask that you be extremely vigilant for any suspicious activity and unsolicited contacts which may be made to you by phone, text, email or instant message,” the post said. “If you are suspicious of any request or message, do not open it and do not reply or click any links but delete it.” 

The security breach comes as users report a rise in crypto-related phishing attempts and schemes. There was a 40% increase in phishing attacks in 2022 year-over-year, according to data from cybersecurity firm Kaspersky Lab. 

ConsenSys reported the incident to the Data Protection Commission of Ireland and the Information Commissioner’s Office in the UK, it said.


Don’t miss the next big story – join our free daily newsletter.

Tags

Upcoming Events

Hilton Metropole | 225 Edgware Rd, London

Mon - Wed, March 18 - 20, 2024

Crypto’s premier institutional conference returns to London in March 2024. The DAS: London Experience: Attend expert-led panel discussions and fireside chats Hear the latest developments regarding the crypto and digital asset regulatory environment directly from policymakers and experts.

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Research report - cover graphics (1).jpg

Research

In this report, we dive into crypto private market data to gather insights on where the future of the industry is headed. Despite a notable downturn in private raises, capital continues to infuse promising projects that aim to transform payments, banking, consumer experiences, community, and more, with 2023 being the fourth-largest year for crypto venture capital.

article-image

BUZZ holds shares of Coinbase, Robinhood and MicroStrategy

article-image

Opinion: Even though I didn’t pay for my “Diamond Hands” burger with BTC, don’t let that fool you into thinking that crypto’s development is futile

article-image

The results mark “a major positive inflection point,” one analyst says, as the exchange carries net income momentum into a crypto rally

article-image

While the slate of 10 US spot bitcoin funds have tallied $4.6 billion of net inflows thus far, half of the field is lagging the leaders

article-image

Trading volumes totalled $154 billion in Q4, including $125 billion in institutional volume

article-image

DeFi on Bitcoin is all the rage right now and Stacks is positioned to benefit