Fortune

Security

Crypto analytics platform Nansen has revealed that a bad actor accessed its admin system to provision customer accounts. On Sept. 20, a security breach by one of Nansen’s third-party vendors led to compromised customer access, underscoring the ever-present digital risk, particularly in the continually evolving arena of blockchain technology and cryptocurrency. 
According to a post on the <a href="https://nansen.ai/" rel="noopener noreferrer nofollow">official Nansen X </a>account, the vendor is a well-established entity trusted by Fortune 500 companies in the same industry for managing customer data. The breach exposed the admin rights to an account used to provide customers access to Nansen’s platform, a severe issue quickly addressed by Nansen as soon as they became aware of the situation. 
Unraveling the extent of the damage, preliminary investigations disclosed that about 6.8% of Nansen users were hit by this incident. This subset of users had their email addresses unveiled, with a smaller fraction also finding their password hashes and blockchain addresses exposed. 
Following the incident, Nansen swiftly reached out to its affected users via email, shedding light on the extent of exposure they faced and the necessary precautionary steps to prevent further potential breaches; a password reset was initiated between 5 pm – 9 pm UTC on Sept. 21, emailing requests to affected users from support@nansen.ai. Users are also asked to reset their passwords on Nansen’s platform manually. 
<h2 id="what-does-this-mean-for-affected-users">What does this mean for affected users?</h2> 
They are urged to change their passwords immediately, despite Nansen’s assertion that they do not store passwords in plaintext. The risk of brute force attacks on accounts using the exposed email addresses and passwords remains a potential threat. Users’ wallet funds, however, remain unscathed as Nansen does not request private keys. The company has also warned its users to stay vigilant against phishing attempts. 
In the wake of this incident, Nansen’s commitment to securing customer data is evident, as they work with the compromised vendor, their external legal advisors, and cybersecurity experts to conduct a thorough investigation. Nansen has assured its users of its dedication to transparency and prompt communication as it navigates through the aftermath of this security breach. 
The post <a rel="noopener noreferrer nofollow" href="https://cryptoslate.com/nansen-warns-of-potential-phishing-attacks-following-vendor-security-incident-exposing-customer-data/">Nansen Warns Of Potential Phishing Attacks Following Vendor Security Incident Exposing Customer Data</a> appeared first on <a rel="noopener noreferrer nofollow" href="https://cryptoslate.com">CryptoSlate</a>.

Nansen Warns Of Potential Phishing Attacks Following Vendor Security Incident Exposing Customer Data

Table of Contents

CryptoSlate

Other articles published on Sep 22, 2023

How to Find Coins That Will Be Listed on Binance (and Buy Them Before the Listing)

Pepe Price Rises 10%, Alpha Callers Predict These 2 New Meme Coins Have ‘Next Pepe’ Potential

U.S. blocks China from getting any of the $52b chip funds raised

Xi’s market gambit: China’s stocks will never be the same

Bitmain comes to the rescue of Core Scientific

XRP Token Holders to Get Exclusive Airdrop in Japanese Yen

Join our free newsletter for daily crypto updates!