coinedition.com
Solana Mobile said attackers gained unauthorized access to its Brevo marketing account, potentially exposing customer information in a security incident at the email provider.
The company disabled its Brevo account after discovering the breach and is working with the provider to determine what data may have been accessed. Solana Mobile said it has no evidence that emails were sent from its account, but the review is continuing.
Our third-party marketing email provider, Brevo, experienced a security incident affecting some customer accounts, including Solana Mobile.
— Seeker | Solana Mobile (@solanamobile) September 12, 2026
We identified unauthorized access to our Brevo account, disabled the account, and are working with Brevo to understand the scope of…
Brevo Breach Affects Crypto Firms
Brevo said attackers exploited a flaw in its SAML single sign-on system, gaining access to 138 customer accounts before the company blocked the intrusion.
Related: Government Seizure Is Not Victim Repayment: What Crypto Users Need to Know
The attackers exported contact lists from 43 accounts, while six accounts were used to send phishing emails. Trezor said the breach affected information linked to about 347,000 subscribers. BitBox and CoinTracking also reported attacks involving their Brevo accounts.
Our preliminary review of the phishing mail that was sent out to our newsletter subscribers about an hour ago found that it is very likely that our newsletter provider got compromised.
— BitBox (@BitBoxSwiss) September 9, 2026
Multiple other Bitcoin companies got targeted as well, and it appears that we all share the…
The phishing campaigns used malicious links designed to steal users’ login details. Rather than gaining direct access to crypto wallets, the attackers used contact information from the affected accounts to target subscribers.
Solana Mobile Issues Security Reminder
Solana Mobile urged users to remain cautious, stressing that it will never ask for seed phrases, private keys or wallet recovery details.
DeFi Warhol also pointed to recent Trezor-related attacks involving email and support providers. The incidents showed how stolen contact data can be used to target crypto users.
Related: Bitcoin Red Team Claims Blockstream Ignored Warnings Before Hack