Breach Disclosure: Coinmama

Coinmama, the Israel based crypto brokerage, suffered a data breach affecting 450,000 of its users detailed in the publication from CoinTelegraph. The data stolen consisted of email addresses and hashed passwords.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media

Details

The data breach was part of a multi-platform hack that affected 24 companies and resulted in 747 million records stolen. Coinmama contacted all affected users and requested them to change to a robust and unique new password as a security measure. Coinmama declared that they don't have evidence of perpetrators using the data but commented that they do not store credit card information.