Opensea is currently one of, if not the largest NFT platform in the world and has been no stranger to problems in the last few months. On June 29, In their most recent blog post, Opensea announced they have had a recent security breach and customer data was stolen.
What You Need To Know
Opensea stated that an employee of Customer.io, a newsletter subscription service contracted by Opensea, abused their employee access privileges and was able to access a database of user email addresses from a subscriber list for the Opensea newsletter and shared them with external parties.
Opensea states that they are working with law enforcement as well as Customer.io in their ongoing investigation. They ask customers to stay vigilant and do not open emails from unknown senders and never provide your private information to anyone that may be impersonating Opensea representatives.
How To Protect Yourself
Being that the breach contained email addresses, Opensea says to watch out for increased phishing attempts. Customers need to be on the look out for emails from people that are attempting to look like Opensea by using similar looking domains like opensea.org, etc. Opensea's official domain is https://opensea.io.
They listed some basic email security guidelines for people to follow since their email addresses were leaked to the hands of scammers.
Be cautious of phishing emails from addresses trying to impersonate OpenSea. OpenSea will ONLY send you emails from the domain: ‘opensea.io.’ Please do not engage with any email claiming to be from OpenSea that does not come from this email domain.
Never download anything from an OpenSea email. Authentic OpenSea emails do not include attachments or requests to download anything.
Check the URL of any page linked in an OpenSea email. We will only include hyperlinks to ‘email.opensea.io.’ URLs. Make sure that ‘opensea.io’ is spelled correctly, as it’s common for malicious actors to impersonate URLs by shuffling letters.
NEVER share or confirm your passwords or secret wallet phrases. OpenSea will never prompt you to do this – in any format.
NEVER sign a wallet transaction prompted directly from an email. OpenSea emails will never contain links which directly prompt you to sign a wallet transaction. Never sign a wallet transaction that doesn’t list the origin of https://opensea.io if you were led there by email.
Stay Safe In This Crazy World
These are good guidelines for anyone to follow for any reason, because in most cases, your email address has been leaked at some point in time. Do not ever give your information to anyone unless you are sure you are giving it to the right person, and not a phishing scammer.
People, even people who are in the know, are scammed everyday. Scammers are getting better and better as technology gets more advanced. Most consumers do not understand how to protect themselves against all of these attacks and are easily put in vulnerable situations.
Stay safe and do not open emails from anyone you do not know or can verify!
Feel free to read the announcement from Opensea here.
https://opensea.io/blog/safety-security/important-update-on-email-vendor-security-incident/
Nothing we say is financial advise.
This is for educational and recreational purposes only!
Stay safe in these volatile markets and don’t get rekt!
Stake with our Cosmos ecosystem validator, Infinity https://coin-logic.com/staking
Follow us on HiveHustlers.io and LeoFinance.io, both on the Hive Blockchain:
https://hivehustlers.io/@coinlogic.online
As well as on Twitter at https://twitter.com/coinlogiconline
Now posting to Odysee https://odysee.com/@coinlogictv
Videos by @thelogicaldude are posted to 3Speak through his account and posted to the Coin Logic TV channel on Youtube.