Yahoo Finance 
Yahoo Finance Plus Celsius Suffers Third-Party Data Breach, Customers Report Phishing Texts, Emails
Crypto lending service Celsius has discovered a data breach with one of its third-party service providers has exposed the personal information of its customers, an email sent to Celsius customers and shared with CoinDesk confirms.
Hackers gained access to a “third-party email distribution system” Celsius uses, according to the email. The hackers have used this information to send fraudulent emails and text messages to Celsius to trick them into revealing the private keys to their funds.
“On April 14, 2021, Celsius customers began reporting a fraudulent website claiming to be an official Celsius platform. We also became aware of some Celsius customers receiving SMS and email messages, that claimed to be official Celsius communication, linking to that website, and prompting recipients to enter sensitive information,” the email reads.
Related: Riksbank Says Sweden Could Have a Digital Central Bank Currency in 5 Years: Report
“An unauthorized party managed to gain access to a back-up third-party email distribution system which had connections to a partial customer email list. Once inside the system, this unauthorized party sent a fraudulent email announcement, of which we know some of the recipients to be Celsius customers.”
The team is still investigating how the hackers gained access to the phone numbers of Celsius’ clients, considering the breach occurred with an email management system.
Notably, Celsius clients report receiving phishing messages to phone numbers that they never provided to Celsius.
Celsius did not return CoinDesk’s request for additional comment.
Related: Robinhood Resolves Issues With Crypto Trading Amid Dogecoin Rally
Last spring, Celsius competitor BlockFi suffered a similar data breach, though by way of a hacker gaining access to an employee’s company accounts through a sim swap. Hardware wallet producer Ledger has also suffered leaks of its customer data. Such leaks can put users’ funds (not to mention their physical safety) at risk.
This is a developing story and will be updated.
