Gemini
HighIn late 2022, Twilio's Authy service impacting Gemini users was breached through social engineering.
Exposed data classes
Fields reported as compromised in this breach record.
Detailed Analysis
In-depth analysis of the breach and its implications.
In December 2022, a dataset alleging to originate from Gemini, a cryptocurrency exchange, emerged in a public hacking forum. However, investigations revealed that the data originated from a breach at a third-party provider, Twilio, utilized by Gemini for two-factor authentication through its Authy service. The breach was traced back to a sophisticated social engineering scheme targeting Twilio's employees.
Impact Analysis
Understanding the scope and consequences of this breach.
- User Impact
- Exposed email addresses and partial phone numbers increase phishing and targeted scam risks.
- Business Impact
- The vendor appeared accountable, with operational trust needing restoration through transparency.
- Affected Sectors
- Cryptocurrency
- Geographic Impact
- Global
What You Should Do
Recommended actions to take in response to this breach.
If You Were Affected
- •Verify no unauthorized access has been made to accounts associated with Gemini.
- •Be vigilant of phishing emails referencing this breach.
Preventive Measures
- •Activate account-level monitoring and alerts for suspicious activities.
- •Advocate for services implementing strong third-party oversight.
Frequently Asked Questions
Common questions about this breach and what it means for you.