Back cointracking.info

CoinTracking

cointracking.info • September 11, 2026

If you received an email titled “Data Breach Notice: Please refresh API Keys as soon as possible” , that email was not sent by CoinTracking . It is a phishing attempt.

Your CoinTracking account is not affected

The email was sent through an external email service provider that we use to deliver messages. The incident was limited to that service – not to CoinTracking's own systems .

That service holds no passwords, no API keys and no portfolio or transaction data . Your account, your login details and your connected exchanges remain secure.

Based on current information, email addresses held by that provider may have been accessed during the incident. In practice this mainly means: please be especially attentive over the coming weeks to emails that appear to come from us.

For the vast majority of recipients, no action is needed . If the email is still in your inbox:

Do not click any links in it.

Do not enter your CoinTracking login details or API keys on any page it links to.

If you already entered information

Only in that case are two steps worth taking:

Change your CoinTracking password and enable two-factor authentication if you have not already.

If you entered exchange API keys, revoke and regenerate them directly at the exchange that issued them – never through a link in an email.

The access route used to send these emails has been closed, and the links contained in the messages have been deactivated. We have reviewed our own systems and found no indication of any access.

Our email service provider, Brevo, has documented the incident in a public statement .

CoinTracking is certified under ISO 27001 for information security. If you have any questions, you can reach us any time at [email protected] .

Last updated: 11 September 2026

Luis is Head of Marketing at CoinTracking, where he leads content, communications, and educational initiatives. He helps traders and investors navigate cryptocurrency taxation with practical, real-world guidance.

Start Tracking Your Crypto Taxes Today

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Attack Targets 347K Trezor Users via Brevo Breach A security flaw in Brevo's login system allowed an attacker to access 138 customer accounts, including those of Trezor, BitBox, and CoinTracking. The attacker exploited a weakness in Brevo's single sign-on (SSO) system, leading to phishing emails sent to approximately 347,000 Trezor customers. Six accounts were used to distribute phishing emails, while contacts were exported from 43 accounts. The phishing emails, titled 'Critical Security Alert: STM32 Entropy Vulnerability,' contained links to malicious applications requesting wallet backups. Trezor took down the malicious domain within 20 minutes, but around 2,500 users clicked the link before it was disabled. Brevo has acknowledged the breach and is investigating the incident. Trezor is treating all email addresses in its Brevo account as potentially compromised. 15 sources 69

Extracted Entities

CoinTracking

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Domains (2)

Email Addresses (1)

MITRE ATT&CK (1)