[Warning] BitMex just leaked thousands of email addresses

[pawel7777]

If you're a BitMex customer, be prepared for the incoming inflow of crypto-related spam and scam attempts coming to your BitMex registered email as BitMex leaked email addresses of all their users.

They sent an update with publically visible list of recipients (instead of 'bcc'). Schoolboy mistake.

More:
https://cointelegraph.com/news/breaking-bitmex-may-have-just-leaked-all-of-their-users-emails

[1714867752]

1714867752

[1714867752]

1714867752

[1714867752]

1714867752

[1714867752]

1714867752

[1714867752]

1714867752

[1714867752]

1714867752

[mk4]

Already being discussed here: https://bitcointalk.org/index.php?topic=5197771

[pawel7777]

Already being discussed here: https://bitcointalk.org/index.php?topic=5197771

Fair enough. Thought it would be good to post this on the main board, for more awareness.

[MURONDI]

I'm not a bitmex user, but I also often receive a lot of crypto-related spam emails, how do they know my e-mail address and how to deal with spam e-mail, because they are very annoying and prone to scams.

[Upgate]

By now everyone should be aware of the exposure and vulnerability there email address is when they use it to register for any cryptocurrency site that why it's good deploy some signature for some reason

[th3nolo]

I'm not a bitmex user, but I also often receive a lot of crypto-related spam emails, how do they know my e-mail address and how to deal with spam e-mail, because they are very annoying and prone to scams.

If you have used your email to register in ICOs, Airdrops, etc probably you have given your email to a company that sells your data as a user of cryptocurrencies.

That's why computer security experts recommend having different emails for each account, that way you avoid malicious attacks due to data breaches like this.

[logfiles]

I am one of the users of bitmex but luckily i never received any Update mail from them Today which implies my email was not among those visible. I do use a separate email for crypto related activities but still the unsolicited spam can be annoying as a fuck. The Spam messages can make you even miss out on important updates.

[alexrossi]

That's why computer security experts recommend having different emails for each account, that way you avoid malicious attacks due to data breaches like this.

Or just an email to use in every situation that seems shady, for the sake of mental health in not managing hundreds of email accounts 

[joinfree]

If you're a BitMex customer, be prepared for the incoming inflow of crypto-related spam and scam attempts coming to your BitMex registered email as BitMex leaked email addresses of all their users.

They sent an update with publically visible list of recipients (instead of 'bcc'). Schoolboy mistake.
More:
https://cointelegraph.com/news/breaking-bitmex-may-have-just-leaked-all-of-their-users-emails

OMG, how on earth can a whole big and recognized exchange platform like Bitmex do something as silly as that. Damn, bounty managers even know how to hide the emails of its participants, how much more a trading platform like Bitmex. This is really a big blow to all users of this platform as it is likely to know that most users would use similar emails on other trading platforms. It would be better if such users can increase the security of their account such as using 2FAs on withdrawals and log ins.
Also, Bitmex should improve their security feature to ward any new attempt to log into its users accounts from new IP addresses. This is so bad and i hope they get it sorted as soon as possible.

[Coyster]

I know someone who uses BitMex and he is yet to receive any spam/scam email, probably it's on its way though. Exchanges are always prone to one taint or the other, it's either hack issues, maintenance issues and now it's the email of users being circulated around.

This is further indication that one should not totally trust any exchange, do not leave your coins there, and if you're going to be giving them any vital information, make sure the exchange is really a reputable one.
This thread is good to stir up the consciousness of BitMex users so they do not fall for any scam attempt.

[th3nolo]

That's why computer security experts recommend having different emails for each account, that way you avoid malicious attacks due to data breaches like this.

Or just an email to use in every situation that seems shady, for the sake of mental health in not managing hundreds of email accounts 

Emm you can always use a password manager, even security distributions like tails include them, plus they help you create really strong passwords.


Bundled software -> Encryption and privacy software -> KeePassXC password manager

https://en.wikipedia.org/wiki/KeePassXC
https://es.wikipedia.org/wiki/The_Amnesic_Incognito_Live_System

[1Referee]

I'm affected as well, but luckily, I use a different email address for each and every service that I use, so the only thing I had to do is change my email address.

Just in case, I changed my password as well for peace of mind, and recommend others to do the same.

I'm honestly not even surprised or shocked about this event as my bar for crypto related services is already super low due to their incompetence and scandals. I'm really glad they don't demand people to kyc verify themselves, which if they end up doing that in the future, is a reason for me to stop using Bitmex. I'm sure they'll leak your kyc details as well. 

[pakhitheboss]

This is why it is always advised to have a separate email address dedicated only to exchanges. If you have used your primary email address then be prepared to receive a lot of spam. It will be a good idea to change the password. Highly unprofessional service by BitMex.

Better to close your account with an unprofessional exchange move your business to a professional and secure exchange.

[oktana]

I thought a few months ago after some Kyc Binance data was leaked by hackers in the telegram, bitmex was the next target, but it turned out that this time the error came from bitmex itself even though it was only an email. to this day there may still be a lot of exodus of email changes from users, i even changed all sensitive data, including transferring funds. IMO if in the end many cases arise that harm the user's funds, then maybe bitmex can take a fairly long maintenance process.

[figmentofmyass]

I'm honestly not even surprised or shocked about this event as my bar for crypto related services is already super low due to their incompetence and scandals. I'm really glad they don't demand people to kyc verify themselves, which if they end up doing that in the future, is a reason for me to stop using Bitmex. I'm sure they'll leak your kyc details as well. 

preach! this is the #1 reason why i hate completing KYC anywhere. exchanges are constantly getting their databases (and wallets!) hacked---if they're not outright leaking personal info like this. they simply can't be trusted to secure our data.

i'm enjoying the last of the wild west days while i can. eventually even bitmex (and its copycats) will start enforcing KYC, at which point i'll scale back my trading a lot.

[Baofeng]

Ok so this time, it's Bitmex fault that thousands of email addresses where leaked? Sad to say that this is another black-eye for traders around the world, I mean they have built their reputation here how the hell in the world they would make this kind of silly mistakes? Anyways, for those who have been affected, you know the drill guys and hurry up, change your passwords. Let's see how Bitmex will do damage control.

[notblox1]

If you're a BitMex customer, be prepared for the incoming inflow of crypto-related spam and scam attempts coming to your BitMex registered email as BitMex leaked email addresses of all their users.

They sent an update with publically visible list of recipients (instead of 'bcc'). Schoolboy mistake.

More:
https://cointelegraph.com/news/breaking-bitmex-may-have-just-leaked-all-of-their-users-emails

On top of that... Bitmex Twitter account was also hacked.
There are always risk when you register with websites like this.
https://beincrypto.com/bitmex-twitter-hacked-bitcoin-traders-identities-leaked/

[alyssa85]

I am one of the users of bitmex but luckily i never received any Update mail from them Today which implies my email was not among those visible. I do use a separate email for crypto related activities but still the unsolicited spam can be annoying as a fuck. The Spam messages can make you even miss out on important updates.

Change your email address anyway. And if you have used this email address on other exchanges, change the email addresses on them too.

In order to hack your account they need a) your email address and b) brute force to work out your password.

If they have a) they'll be hammering on b) - so change everything.

[Casdinyard]

Ok so this time, it's Bitmex fault that thousands of email addresses where leaked? Sad to say that this is another black-eye for traders around the world, I mean they have built their reputation here how the hell in the world they would make this kind of silly mistakes? Anyways, for those who have been affected, you know the drill guys and hurry up, change your passwords. Let's see how Bitmex will do damage control.

Is it intentional? I mean of course they'll be doing that for years and simply checking twice or thrice isn't hard to do. Ideally, they know how sensitive if emails will be leak. Geez. Can't believe this.

On top of that... Bitmex Twitter account was also hacked.
There are always risk when you register with websites like this.
https://beincrypto.com/bitmex-twitter-hacked-bitcoin-traders-identities-leaked/

RIP Bitmex. Hope your exchange site is insured so whatever losses there will be, it gets covered.

[Tipstar]

Perks of using a centralized exchange. But the users would move on. They even moved on when binance leaked their personal info with photographs, it's just the emails.
Though it's a good opportunity for bitmex users to try decentralized exchange.

[blckhawk]

These exchanges need to tighten up security and business practices. Email is one critical entry point of hackers to target victims and for those ignorant ones, they could potentially fall victim to such spams, and other possible attacks. That's why it's better to have separate emails for different endeavors, isolate it to your main email account. Either way, people should be aware and educated on how such attacks are commited and how to steer away from them, such as be always concerned before entering any sensitive data to any site as much as possible.

[Drai]

Bummer!. Those spam mails are very annoying but thanks to Google mail for making it easy to blacklist addresses so they wouldn't be able to spam you again after doing it for the first time, spam me once, stupid you, spam me twice, stupid me. I wonder what could have gone wrong to Bixmex to make such a terrible mistake, anyways when humans are handling something, there is bound to be a mistake because no human is above mistakes no matter how insignificant it seems, the most troubling was the series of tweet that said that BitMex had been hacked and that users should withdraw their Bitcoin, although the tweets were deleted, some people are speculating that the tweets were made by the same person who must have sent those mails because they must have been sacked after the error was discovered.

[Pipdips]

If you're a BitMex customer, be prepared for the incoming inflow of crypto-related spam and scam attempts coming to your BitMex registered email as BitMex leaked email addresses of all their users.

They sent an update with publically visible list of recipients (instead of 'bcc'). Schoolboy mistake.

More:
https://cointelegraph.com/news/breaking-bitmex-may-have-just-leaked-all-of-their-users-emails

Wow, scary.  Glad I am not a BitMex member.