Coinmama Data Breach

What happened

In August 2017, the crypto coin brokerage service Coinmama suffered a data breach that impacted 479k subscribers. The breach was discovered in February 2019 with exposed data including email addresses, usernames and passwords stored as MD5 WordPress hashes. The data was provided to HIBP by white hat security researcher and data analyst Adam Davies.

Exposed data

Recommended actions

• Change your Coinmama password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Coinmama — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.