7,000 MetaMask Users Targeted in Security Breach, ConsenSys Says

Fraudsters targeted one of MetaMask’s third-party service providers to gain access to personal data such as email addresses

article-image

sdx15/Shutterstock modified by Blockworks

share

Thousands of MetaMask users who contacted customer support over an 18 month period were targeted in a personal data breach, ConsenSys said Friday. 

An estimated 7,000 individuals had private information, such as email addresses, compromised between August 2021 and February 2023, the blockchain software firm said in a blog post. MetaMask’s browser extension and mobile app users were not impacted, according to ConsenSys.

Fraudsters targeted a third party service provider MetaMask uses to create customer support tickets, ConsenSys said, which is how the personal data was seized. 

“The incident occurred when unauthorized actors gained access to the third-party service provider’s systems,” ConsenSys said in the post. “As a result of this incident, MetaMask users who submitted personal data to our customer support may have had that data accessed by an unauthorised third party.” 

Compromised data mostly includes “limited” personal information needed to identify customers for support needs, the company said, but users could have shared additional information in the chat function that was seized. 

ConsenSys has stopped the unauthorized access, it said, and the threat is no longer ongoing. Affected users may be targeted in future phishing scams however, the company acknowledged, noting that customers should be aware of potential threats. 

“As always, we ask that you be extremely vigilant for any suspicious activity and unsolicited contacts which may be made to you by phone, text, email or instant message,” the post said. “If you are suspicious of any request or message, do not open it and do not reply or click any links but delete it.” 

The security breach comes as users report a rise in crypto-related phishing attempts and schemes. There was a 40% increase in phishing attacks in 2022 year-over-year, according to data from cybersecurity firm Kaspersky Lab. 

ConsenSys reported the incident to the Data Protection Commission of Ireland and the Information Commissioner’s Office in the UK, it said.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Brooklyn, NY

SUN - MON, JUN. 22 - 23, 2025

Blockworks and Cracked Labs are teaming up for the third installment of the Permissionless Hackathon, happening June 22–23, 2025 in Brooklyn, NY. This is a 36-hour IRL builder sprint where developers, designers, and creatives ship real projects solving real problems across […]

recent research

REPORT_Template.png

Research

The Sonic blockchain is leveraging redesigned airdrop incentives and its FeeM program to propel DeFi activity and attract institutional capital, setting the stage for ecosystem growth. Within this environment, leading protocols Shadow Exchange and Silo are poised to asymmetrically benefit due to innovative features and favorable valuations, despite facing ecosystem dependency and competitive pressures. This positions them as compelling, potentially shorter-term, investment opportunities contingent on Sonic's sustained success.

article-image

Bitcoin needs a price, but its magic runs deeper

article-image

Circle had a pretty successful first day of trading, but what’s next for the stablecoin issuer?

article-image

Solana’s USDC caught a boost after being paired with the TRUMP memecoin

article-image

The stablecoin issuer’s successful first day of trading is likely to spur more crypto IPOs, industry watchers say

article-image

Job openings rallied and continuing claims stalled ahead of May’s employment report

article-image

A group of Twitch streamers battle for bitcoin. Will their chats help them?