Uphold Email Exposure Explained: What Happened With the Customer.io
Uphold is a digital finance platform where people can: buy, hold, and trade cryptocurrencies, and not just crypto: they can also buy regular currencies (e.g., USD, INR) and other financial assets. Uphold doesn’t do everything itself, just like large companies; Uphold also uses third-party services for some tasks. This work is entrusted to reliable companies.
In 2022, Uphold suffered an incident with a third-party service provider. The name of this company was Customer.io. The function of Customer.io is to send emails and manage customer engagement.
A security issue occurred with Customer.io. After this incident, people on the Internet started calling it “Uphold data breach, but this is a misunderstanding. Uphold’s own systems were not hacked; The issue occurred only on the Customer.io side, and Uphold’s core platform remained secure.
What actually happened in Customer.io?
Customer.io had an employee/authorized person who had access to the system, meaning they could legally use it. This person did something wrong; He shared some customer data with an unauthorized person. This work violated the company’s rules.
Now, let’s get to the most important points: Uphold was not hacked. Uphold’s system was secure, and the servers and databases remained completely secure. The problem occurred outside of Uphold; The problem was with the Customer.io system. Nothing was compromised inside the Uphold platform. Wallet and trading remain completely secure. Crypto wallets, trading systems, and users’ funds were all completely safe.
How did Uphold handle the Incident?
Uphold took immediate action and contacted Customer.io’s security team to determine what data was leaked, the extent of the risk to customers, and whether any other information was leaked.
Uphold has partnered with Customer.io to implement additional security measures. To prevent such incidents from reoccurring in the future, no employee or system can access customer data without Uphold’s express permission.
To maintain transparency, comply with legal regulations, and seek expert advice on what further steps should be taken, Uphold reported the incident to the UK Data Protection Authority (ICO).
Found this article interesting, read more exclusive content we post.
Frequently Asked Questions
No, Uphold wasn’t breached. Their systems, servers, databases, and the core platform all stayed secure; no one hacked them, and nothing got compromised. The real issue happened back in 2022 with one of Uphold’s third-party partners, Customer.io. Even then, it didn’t touch Uphold’s wallets, trading systems, private keys, passwords, or anyone’s funds. Everything stayed safe.
Here’s what actually happened: An employee at Customer.io had proper access to their systems but broke company rules by sharing some customer info with someone who shouldn’t have had it. That’s not hacking, that’s someone abusing their position. Afterward, Uphold teamed up with Customer.io to tighten security and let the authorities know, making sure nothing like this slips through again.
A lot of people heard “Uphold hacked” or “data breach” and got worried, but that’s just confusion about the Customer.io situation. Uphold’s own internal systems, servers, databases, and the core platform are still locked down and safe. The info that got shared was limited and didn’t include your crypto wallets, trading systems, passwords, or private keys.
If you’re wondering about your funds or wallets, you’re in the clear. The 2022 incident didn’t touch any of that, just some customer engagement and email communication data through Customer.io. Uphold’s main platform, blockchain wallets, and financial systems all stayed rock solid.
After the incident, Uphold acted fast. They worked side-by-side with Customer.io’s security team to figure out exactly what happened, what data was involved, and if there was any risk to users. They didn’t hide anything, either; they reported it to the UK Data Protection Authority and checked in with security experts. Uphold took the whole thing seriously, put users’ safety first, and made their platform even more secure.
Call Now — 24/7 Ransomware Help
If you’re under attack, call now. We’ll start safe containment, preserve evidence, and stand up a clean landing zone. No contracts required to start.
Call 316‑712‑4006
I am at risk, Save me!