CoinMarketCap, a crypto price tracking website, was hit with a data leak that saw 3.1 million of its users’ email addresses being leaked onto the dark web. After the leak was first reported by Have I Been Pwned, CoinMarketCap initially denied the hacking incident occurred. The company soon after admitted to the data leak as “batches of data have shown up online purporting to be a list of user accounts.”
Cyber criminals have targeted the company with phishing campaigns in the past, however, the company has stated that they could not determine any sources of the leaked information. No data leaks were found on their servers prompting them to speculate that the leak was “likely sourced from another platform where users may have reused passwords across multiple sites.”
The incident remains under investigation and CoinMarketCap has pledged to deliver further updates. For now, it appears that no passwords, financial data or other consumer PII was leaked during the incident as of the time the statements were released.