The crypto analytics platform Nansen has disclosed that a malicious actor created customer accounts by accessing its administrative system. On Sept. 22, the crypto analytics platform Nansen reported a security breach, noting that some users’ email addresses, password hashes, and blockchain addresses had been made public.
A post on the official Nansen X account claims that the vendor is a reputable organization that Fortune 500 companies in the same industry rely on to manage customer data. A preliminary investigation revealed that 6.8% of its user base was affected, with their email addresses exposed.
Nansen also shared a photo informing users, which says, “A breach on the vendor’s side gave an attacker access to admin rights to an account used to provision customer access to our platform. We managed to stop the unauthorized access shortly after learning about it and launched an immediate investigation.”
A small portion of these users also had their password hashes and blockchain addresses exposed, in addition to their email addresses being made public. The company sent letters to affected users, advising them to change their passwords because other applications using the same email address and password might also be vulnerable.
Also Read: FTX & BlockFi’s Customer Data Breaches in Kroll Hack