OpenSea

OpenSea experienced a data breach on Feb. 20. While this attack only affected 17
users, the hackers made off with $1.7 million in crypto assets and leaked emails of
OpenSea users. OpenSea was completing a migration, providing a perfect
opportunity for a phishing attack. There is wide speculation that whoever caused
this data breach tricked some OpenSea users to sign a contract partially, leaving
some portions blank and thus making it possible for the bad actor to finish filling it
out, calling for the creation of a new contract that, for free, transferred NFT
ownership.
Since the breach, OpenSea has remediated the issue by warning users about
email phishing and implementing new security policies to make it harder to
download customer data. They also terminated the employee they suspected to
be working with the bad actor and reported the person to law enforcement.

Cash App
Cash App went public with a data breach on April 4. Losses included names and
account numbers for more than 8 million users. A former Cash App employee
downloaded reports that contained American users' personal information—
specifically, users of Cash App Investing were affected. To address the issue, Cash
App contacted all former and current users of the feature so they could answer
the users’ questions and provide resources and information. They also notified
law enforcement about the breach, and advised all users of Cash App to change
their passwords and utilize two-factor authentication.

Twitter
On July 22, Twitter announced a data breach that resulted in the loss of 5.4
million phone numbers and email addresses. The attacker exploited one of the
microblogging platform's log-in identification features, which allows a user to
submit a publicly known phone number or email address and match it to a Twitter
account. The attacker was able to create a list that contained scraped emails and
phone numbers from the accounts of users with publicly available information. In
response, Twitter remediated the issue by patching the vulnerability, and it has
also encouraged its users to use two-factor authentication for their Twitter
accounts.