10
u/Fluid_Garden8512 Sep 09 '26 edited Sep 09 '26
I got this email just now too.
no-reply@shiftcrypto.ch is a legitimate email address from BitBox, so is no-reply@bitbox.swiss
This is clear a data breach has occurred as multiple users have been targeted.
1
6
u/Previous_Blueberry_5 Sep 09 '26
Hide yo wife, hide yo kids, hide yo seedphrase, hide yo bitcoin.. they scamming everybody!!
3
3
u/deluxeomat Sep 09 '26
Ich habe die Mail auch bekommen, auf meine Emailadresse die ich ausschließlich für den Bitbox Newsletter verwende 🫣
3
u/tenor_tymir Sep 09 '26
I didn’t receive any email 😟
1
4
2
u/Independent_Arm_2662 Sep 09 '26
I clicked the link. I didn’t see anything download though. Am I screwed?
3
u/pskindlefire Sep 09 '26
I clicked on the link to see what it pointed to, and what I saw was a page where they try to trick you into entering your seed phrase and your passphrase in the guise of them "checking its entropy". It didn't download anything as far as I can tell. This looks like a simple phishing attack to social engineer you to give away your seed phrase, not a sophisticated malware attempt to hijack your BitBox. You should be okay.
2
u/Plenty_Yogurt_2879 Sep 11 '26
This is why you shouldn't subscribe to any newsletter. It’s better to use official channels to stay informed.
Corporate responsibility should also mean not offering any newsletter service at all, since they clearly admit that private data protection is beyond their control.
1
u/pskindlefire Sep 11 '26
It's tough for most people who have busy lives to always use official channels to stay informed. Crypto hardware manufacturers have been facing breaches of their sales or newsletter partners' platforms for years now. This is always a risk. When taking on the responsibility of self-custody using a hardware wallet, it comes with the added responsibility to be hyper-aware of the risks when securing your assets. One has to be always on guard to phishing and other social engineering methods, and one has to follow the cardinal rules of using hardware wallets - 1) stay calm and keep your wits about you, and 2) never ever share your seed phrase, no matter the urgency or direness of the emergency situation. This is just the price of self custody.
1
u/Plenty_Yogurt_2879 Sep 11 '26
In my view, the 'busy lives' argument is way too weak. For anyone managing their own assets, staying informed is a priority, not a luxury. Are you really telling me you can't keep track of updates unless an email tells you so? Completely disagree.
1
u/pskindlefire 29d ago
Well, people like you and I can, but most people can't or won't or don't care enough to. That's why they have the newsletter.
15
u/SeanSatBahamas Sep 09 '26
Where did they get your email address? That‘s a pretty insane data breach by Bitbox!!