Celsius has revealed that an employee of customer.io has access to a list of user emails. The person has since transferred the list to a third party. Celsius does not consider the incident a risk to their users. However, they posted a Tweet warning customers about the situation. In addition, Celsius has said that they are in communication with the Customer.io team. The messaging platform has confirmed that no Celsius-related information has been compromised other than the identified ones.
Nevertheless, the possibility of phishing attacks on the emails of the affected users looms. Celsius informed their users about the development via an email sent on July 26. According to the email, the lender’s security has not been compromised.
How was Celsius’s customer data leaked?
All this ties into the Email leak from OpenSea users of late June 2022. Celsius discovered that Customer.io was behind the breach and the company subsequently removed all data from the messaging platform.
However, on July 8, the lending platform was informed that a Customer.io employee had access to a list of customer emails, which was then sent to a third party. Customer.io confirmed that no data other than the list of emails has been compromised. However, there is no concrete evidence to support this and Customer.io has not provided any evidence to support their confirmation.
This leads to speculation about how Customer.io can guarantee that no other information was included. In addition, Celsius’s opinion on the minimum risk should be taken with a grain of salt. We may soon see a series of phishing attacks on customers.
Nevertheless, the company has notified the relevant authorities of the infringement. They view the development as a serious violation of the supplier-customer relationship.
Celsius is already going through one of its most challenging times. The company plans to leverage its Bitcoin mining initiatives to generate the necessary funds to repay his debt.