Lemon Cash reveals user data leak due to vulnerability in external provider Mixpanel

The Argentine cryptocurrency platform Lemon Cash revealed on December 4 that users’ personal data was exposed as a result of a security breach suffered by Mixpanel, its external web analytics provider, on November 9.

In a statement, the Lemon team specified: “Lemon’s own systems did not suffer any vulnerability. The leak came from Mixpanel, an external tool we used for data analysis in our API, where only the names and email addresses of some users were exposed.”

The team behind the cryptocurrency platform emphasized that no private keys, seeds, or funds were affected, and the leak does not pose a direct risk of cryptocurrency theft. “All sensitive account information, including balances, transaction amounts, transfers, access credentials, passwords, PINs, and IDs, among others, remain fully protected,” they stated.

Lemon sent an email directly to the affected users to “warn about possible phishing attempts and remind them of necessary security measures to avoid them.”

![Mail enviado a los usuarios de Lemon][image]https://img-cdn.gateio.im/webp-social/moments-2ccbf88313-87da2f790f-153d09-6d5686.webp(

The incident originated when attackers gained unauthorized access to Mixpanel’s systems. The company was slow to notify its clients, among them OpenAI and Lemon )after the incident, OpenAI disassociated from Mixpanel(.

Since Mixpanel’s code was directly integrated into Lemon’s page, information users sent while browsing ended up in the attackers’ hands.