# Crypto customers targeted by scammers after email marketing provider breach

DevFeed: [Crypto customers targeted by scammers after email marketing provider breach](<https://devfeed.tech/articles/crypto-customers-targeted-by-scammers-after-email-marketing-provider-breach-8437.md>)

Original publisher: [Read original article](<https://www.malwarebytes.com/blog/news/2026/09/crypto-customers-targeted-by-scammers-after-email-marketing-provider-breach>)

Author: Pieter Arntz

Published: 2026-09-11T15:01:53Z

Content type: news

Language: en

Sources: [Malwarebytes](<https://devfeed.tech/sources/malwarebytes.md>)

Topics: [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [incident](<https://devfeed.tech/topics/incident.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>)

Tags: [attacks](<https://devfeed.tech/tags/attacks.md>), [breach](<https://devfeed.tech/tags/breach.md>), [cryptocurrency](<https://devfeed.tech/tags/cryptocurrency.md>), [news](<https://devfeed.tech/tags/news.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [scams](<https://devfeed.tech/tags/scams.md>), [security](<https://devfeed.tech/tags/security.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>)

## AI overview

A Brevo breach enabled phishing emails targeting cryptocurrency-company newsletter subscribers. The attacker exploited a SAML SSO handling flaw, accessed 138 accounts, and used some accounts to send phishing messages or export contacts.

## Source excerpt

A breach at email marketing company Brevo exposed Trezor, CoinTracking, and BitBox customers to phishing emails, but others may also be at risk.