Waltio Confirms Brevo Breach Touched Its User Emails: Here Is What To Do Now

French crypto tax platform Waltio has started emailing its users about a security incident at Brevo, the third party email provider it uses to send campaigns. The message is calm, carefully worded, and mostly reassuring. It is also the latest confirmation that the Brevo breach of early September has a longer guest list than anyone first thought.If you are a Waltio user, your tax reports are fine. Your email address may not be. And in crypto, an email address in the wrong hands is not a small thing.What Did Waltio Actually Tell Its Users?The notice, sent in French under the heading "Information relative à la sécurité de vos données personnelles", sets out four points.First, no malicious emails went out from Waltio's account. Nothing was blasted to the contact list pretending to be Waltio.Second, Brevo's analysis is still running. Brevo has not been able to confirm whether the intruder actually viewed or exported Waltio's contact list, only that unauthorised access to the account happened.Third, the data at risk is thin. The only fields Waltio keeps inside Brevo are the email address tied to your Waltio account and, if you entered it voluntarily, your French department number. That i...