OpenSea, a major NFT marketplace, warned its users that their email had most likely been leaked and recalled 5 tips on how to protect yourself from email phishing attempts.

"We recently learned that an employee of Customer.io, our email delivery vendor, misused their employee access to download and share email addresses – provided by OpenSea users and subscribers to our newsletter – with an unauthorized external party," the company said, adding that they have reported this incident to law enforcement.

The company warned its users to "handle emails from OpenSea with caution in the future," citing the possibility of email phishing attempts due to the data's inclusion of security email addresses.

The market provided 5 security recommendations:

• "Beware of phishing emails from addresses that try to impersonate OpenSea. OpenSea will ONLY send you emails from the domain 'opensea.io'. Please note that any email that does not come from this domain and claims to be from OpenSea Don't bother with the mail.

• Never download anything from an OpenSea email. Authentic OpenSea emails do not contain attachments or requests to download anything.

• Check the URL of any linked page in an OpenSea email. Only "email.opensea.io." We will add hyperlinks to their URLs. Make sure that "opensea.io" is spelled correctly, as it's common for malicious people to impersonate URLs by scrambling letters.

• NEVER share or confirm your passwords or secret wallet phrases. OpenSea will never ask you to do this – in any form.

• NEVER sign a wallet transaction requested directly from an email. OpenSea emails will never contain links asking you to directly sign a wallet transaction. If you are emailed, never sign a wallet transaction that does not list the source of https://opensea.io."

‍