Solana Mobile Breach at Brevo Exposes Users to Phishing Risks

• •Unauthorized access to Solana Mobile's Brevo account affects 138 customer accounts.
• •Attackers exploited a flaw in Brevo's SAML single sign-on system.
• •No emails have been sent from the compromised account, but phishing risks remain.

Solana Mobile reported a security incident involving its third-party marketing email provider, Brevo, which resulted in unauthorized access to its Brevo account. The breach affected 138 customer accounts, with attackers exploiting a vulnerability in Brevo's SAML single sign-on system. Solana Mobile has since disabled its Brevo account and is collaborating with Brevo to assess the extent of the data accessed. Currently, there is no evidence that any emails were sent from the compromised account. Users are reminded that Solana Mobile will never request sensitive information such as seed phrases or private keys. The incident raises concerns about potential phishing attacks targeting crypto users, especially in light of recent similar incidents involving other crypto firms. The investigation is ongoing, and further updates are expected as more information becomes available.