CoinGecko’s third-party email management platform, GetResponse, suffered a data breach on June 5, allowing attackers to export the contact information of over 1.9 million CoinGecko users. The breach resulted from a compromised employee account. The compromised data includes users’ names, email addresses, IP addresses, locations of email opens, and other metadata such as sign-up dates and subscription plans. CoinGecko user accounts and passwords remained secure and uncompromised. Although the main email domain was not compromised, the attacker managed to send 23,723 phishing emails.