Millions of OpenSea user emails leaked in 2022 now fully public: SlowMist

[_act_]

This is to OpesSea users to be aware of what phishing scam is as their emails that was leaked in 2022 has been known to the public. You can read the news here: https://cointelegraph.com/news/opensea-user-emails-fully-publicized-2022-leak-slowmist

Some scammers will use the opportunity to look for some people to scam. Also some of the emails that have weak password may be targeted for compromisation.

[btcltcdigger]

Email leaks have become a normal thing nowadays. Just like COVID, it was scary at first, but now it's everywhere and you eventually get it, but nothing serious comes out of it anymore.
I got a crypto email which gets around 20-30 phishing emails per day. It's just part of life now

[Taskford]

Email leaks have become a normal thing nowadays. Just like COVID, it was scary at first, but now it's everywhere and you eventually get it, but nothing serious comes out of it anymore.
I got a crypto email which gets around 20-30 phishing emails per day. It's just part of life now

People should not think its normal since this situation is critical especially for those people who use their main email which have important information that might compromise by said email leaking.

After that incident happen to OpenSea if they know they transact with that platform people should be careful on the emails they receive and don't tempt to try those promotions they see. Also its important to use dummy emails for signing up on platforms like this so that we will not be compromised badly if there's situation like this to happen.

Same as you I receive tons of spam emails due to some activities I made but never bother to open any of it.

[hugeblack]

Such leaks mean you need to be careful with your email and avoid using providers that give you hundreds of additional address (alias)^[1]. Since the leaked database is now publicly available, it is likely that its value has become very low and cannot be sold.

CZ was using opensea and part of this data leak



[1] https://proton.me/support/creating-aliases

[ABCbits]

It's another reason to use different email address (or alias) and password for each website.

CZ was using opensea and part of this data leak

Do we know whether the list only contains verified email address or also contains non-verified email address? After all, i expect tech public figure like him would use different email address.

[Franctoshi]

Even without this OpenSea email leaked in 2022, You should also note that some of these platforms we're registered in and use on daily for our day-to-day business transactions secretly used to sell your emails to companie for advertisements and even to hackers if your someone that works or does his or her businesses online 24/7. If you want to get to know how exposed your email or password has become without you knowing, you can also go check if your email or password are leaked here https://pentester.com/

[Wiwo]

This is to OpesSea users to be aware of what phishing scam is as their emails that was leaked in 2022 has been known to the public. You can read the news here: https://cointelegraph.com/news/opensea-user-emails-fully-publicized-2022-leak-slowmist

Some scammers will use the opportunity to look for some people to scam. Also some of the emails that have weak password may be targeted for compromisation.

Email 📧  leaked in 2022 is still having such an impact on the rate of phishing attacks I've recently passed the year 2024 and also the possibility of the continuation of such an increase In phishing attacks in the current year, internet users need to be on the lookout for possible attempts and also trying to protect themselves from being victims of such attacks.

I remember way back when I used to expose my emails while filling online spreadsheets, I used to receive all manners of emails that were phishing attempts but I didn't click any of those links, we need to be fully guided to stay above hackers and scammers playing the bad actors in the online space.

[Porfirii]

Email leaks have become a normal thing nowadays. Just like COVID, it was scary at first, but now it's everywhere and you eventually get it, but nothing serious comes out of it anymore.
I got a crypto email which gets around 20-30 phishing emails per day. It's just part of life now

People should not think its normal since this situation is critical especially for those people who use their main email which have important information that might compromise by said email leaking.

-snip-

Email addresses are considered personal data in the cases they can be linked to the identity of the owner (directly or by crossing data from different sources). Like with other attacks to our fundamental rights and privacy, some people are getting used to them, but frequency doesn't justify violations. On the contrary, the more the data available and the more powerful the technology available for bad actors at a low cost, the greater the seriousness of the matter.

[OcTradism]

Some scammers will use the opportunity to look for some people to scam. Also some of the emails that have weak password may be targeted for compromisation.

Using one email address for all things is so risky. Data leak like this can put your only email as target of many scammers.

[CyberSecurity] Have you ever been pwned? Protect yourself from cyberattacks.
https://haveibeenpwned.com/

The advice is using different emails for different uses and your main email must be used only for most important things. For other less important usages, you can use other email addresses, even throw-away email addresses.

Security and Privacy Encylopedia.

[Davidvictorson]

Speaking to Cointelegraph, 23pds explained that while the attack occurred in June 2022, the data had not been made public until recently, meaning “all groups of attackers can use this information to go phishing and scamming.”

This was 3 years ago. Imagine the info that will be made public in 2027 that was already in 2025.
Our personal information are being traded in the dark web just as buying and selling occurs in the marketplace. On one hand, I feel hopeless that  there is little I can do to protect my information from getting into the wrong hands once I have entered it on the internet. What is however in my control is that I will not click on any supicious link sent to my email.

[albon]

This urges us to use a secondary email to register on such platforms, airdrops, and similar non-essential activities because even if the data of these platforms is leaked, at least the primary email will not receive phishing messages from scammers.

Also, secondary authentication must be activated on all platforms and sites that a person uses, as it provides an additional layer of security. We should not underestimate the phishing that OpenSea users may be exposed to. The article shared by OP highlights that phishing was one of the most significant security threats last year, with scammers stealing over $1 billion, according to a report by the blockchain security firm CertiK. Always be cautious when dealing with links and email attachments, as the sender might not be from an official source.

[Aanuoluwatofunmi]

This is to OpesSea users to be aware of what phishing scam is as their emails that was leaked in 2022 has been known to the public. You can read the news here: https://cointelegraph.com/news/opensea-user-emails-fully-publicized-2022-leak-slowmist

Some scammers will use the opportunity to look for some people to scam. Also some of the emails that have weak password may be targeted for compromisation.

All these are sounding warnings to some of us yet to be a victim of any centralized institution for the storage use of our digital assets, every recent information like this should be taken serious and into consideration by any cryptopreneur because we don't know when our own challenge may come and if we are going to be well prepared for it or not before coming, lastly, this is a subtle reminder that we should not provide any information which we think could cost us to the public or any centralized organization or institute for any purpose, because they have central server where these are being stored and can be leaked by any one of their team members or on government request to the public.

[Wiwo]

Speaking to Cointelegraph, 23pds explained that while the attack occurred in June 2022, the data had not been made public until recently, meaning “all groups of attackers can use this information to go phishing and scamming.”

This was 3 years ago. Imagine the info that will be made public in 2027 that was already in 2025.
Our personal information are being traded in the dark web just as buying and selling occurs in the marketplace. On one hand, I feel hopeless that  there is little I can do to protect my information from getting into the wrong hands once I have entered it on the internet. What is however in my control is that I will not click on any supicious link sent to my email.

So much data's being transacted on the dark net truly and we have to keep on enlightening ourselves on the need to be careful with the level of sensitive data that we give out while filing anything online because whatever is posted on the internet is no longer hidden it just take a glitch attack to get them all stolen and sold.

Is very important for us to guide ourselves going forward, the last time I used personal information such as home address or ID is long now, and the email I use for filling online forms is an away email and not my official email so for sure I am a little bit protected from possible attacks.

[BIT-BENDER]

Email leaks have become a normal thing nowadays. Just like COVID, it was scary at first, but now it's everywhere and you eventually get it, but nothing serious comes out of it anymore.
I got a crypto email which gets around 20-30 phishing emails per day. It's just part of life now

It being normal doesn't make it right though but that's just the situation we find ourselves also opensea users are not the only vulnerable set of people to getting their email leaked, you can get your email leaked from project you joined, telegram crypto groups that demands it and so many other ways. One good solution is to have a special email for all your crypto-currency involvement and avoid clicking on links you aren't certain of.