Some people received account reset email notifications some time ago, and it turns out that a massive data breach was to blame. A total of 17.5 million account information records were leaked in this incident, covering a wide range.

The leaked data includes a lot of sensitive information—full names, account names, verified email addresses, phone numbers, user UIDs, as well as country and location data. These things alone may not seem problematic, but combined they can cause serious issues.

For those who are actively involved in the Web3 ecosystem, such data leaks are especially dangerous. Hackers who obtain this data can easily launch targeted social engineering attacks—impersonating official sources, phishing links, pretending to be friends requesting loans or transfers, with a variety of tactics. Since phone numbers and emails are exposed, the risk of SIM swapping attacks cannot be ignored.

This serves as a reminder for everyone to stay vigilant—be cautious with unfamiliar links, verify official notification channels, and enable two-factor authentication on key accounts to avoid laziness.