NFT marketplace OpenSea hit with another data breach

OpenSea, the popular NFT marketplace has been hit with another data breach. This time, the company says that an employee of its email vendor, Customer.io, apparently downloaded and shared email addresses linked to OpenSea accounts.

The company said in a tweet, that emails provided to the marketplace by users, and people who had subscribed to its newsletters were both affected.
In a post on their blog, the company said that there was a high chance of email phishing attempts, now that the addresses had been leaked online. It also appealed to customers to maintain safe email practices and categorically told them to only respond to mails from their official domain (opensea.io).

The told customers to be vigilant and not respond to visually similar or fake domains that mimicked their official account, some examples given were - opensae.io, opensea.org and opensea.xyz -.

They also warned users that official OpenSea mails would never contain any attachments, and told them to ignore download requests from similar or suspicious domains.

"Your trust and safety is a top priority. We wanted to share the information we have at this time, and let you know that we’ve reported the incident to law enforcement and are cooperating in their investigation," the company wrote in the blog post.