7,000 MetaMask Users Targeted in Security Breach, ConsenSys Says

Fraudsters targeted one of MetaMask’s third-party service providers to gain access to personal data such as email addresses

article-image

sdx15/Shutterstock modified by Blockworks

share

Thousands of MetaMask users who contacted customer support over an 18 month period were targeted in a personal data breach, ConsenSys said Friday. 

An estimated 7,000 individuals had private information, such as email addresses, compromised between August 2021 and February 2023, the blockchain software firm said in a blog post. MetaMask’s browser extension and mobile app users were not impacted, according to ConsenSys.

Fraudsters targeted a third party service provider MetaMask uses to create customer support tickets, ConsenSys said, which is how the personal data was seized. 

“The incident occurred when unauthorized actors gained access to the third-party service provider’s systems,” ConsenSys said in the post. “As a result of this incident, MetaMask users who submitted personal data to our customer support may have had that data accessed by an unauthorised third party.” 

Compromised data mostly includes “limited” personal information needed to identify customers for support needs, the company said, but users could have shared additional information in the chat function that was seized. 

ConsenSys has stopped the unauthorized access, it said, and the threat is no longer ongoing. Affected users may be targeted in future phishing scams however, the company acknowledged, noting that customers should be aware of potential threats. 

“As always, we ask that you be extremely vigilant for any suspicious activity and unsolicited contacts which may be made to you by phone, text, email or instant message,” the post said. “If you are suspicious of any request or message, do not open it and do not reply or click any links but delete it.” 

The security breach comes as users report a rise in crypto-related phishing attempts and schemes. There was a 40% increase in phishing attacks in 2022 year-over-year, according to data from cybersecurity firm Kaspersky Lab. 

ConsenSys reported the incident to the Data Protection Commission of Ireland and the Information Commissioner’s Office in the UK, it said.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the Forward Guidance newsletter.

Get alpha directly in your inbox with the 0xResearch newsletter — market highlights, charts, degen trade ideas, governance updates, and more.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 18 - 20, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

5.png

Research

This months PPGC covered four main areas. Firstly, is a discussion around PIP-48 which is an introduction of Path Based Storage Schemes (PBSS). Secondly is the a implementation of DNS Discovery which enhances node synchronization by providing secure and efficient peer connections. Thirdly an update on PIP-47 Delayed for Security. Lastly, an overview of the Season 1 Transparency Report for the Polygon Community Grants Program.

article-image

BlackRock’s Samara Cohen said “a fair amount of plumbing” is needed to unlock the ability for pensions and endowments to gain BTC exposure

article-image

CoinFund president Chris Perkins said crypto voters will influence a number of election outcomes

article-image

Crypto stances vary among candidates vying for Senate seats in Utah, Michigan and Arizona

article-image

Blue Sheets Simple-Earn offers a new route to fixed-rate lending on EVM chains

article-image

True sovereignty isn’t just about financial freedom

article-image

OpenSea co-founder Devin Finzer claims the new OpenSea is being rebuilt “from the ground up”