Waltio
ModerateConfirmedDigital services
Waltio, a French crypto-asset tax platform, informed its users on September 15, 2026 of unauthorized access to its account with Brevo, its email-sending provider, as part of a security incident suffered by that provider on September 10, 2026. The company says it does not yet know whether its contact list was viewed or exported; if it was, the exposed data would be limited to the account's email address and, for some users, their department number. Waltio states that this tool held no passwords, API keys, wallet addresses, or tax or transaction data. This incident is distinct from a prior breach Waltio acknowledged in January 2026.
The potentially exposed contact details could be used to target Waltio users with more credible phishing messages, in a crypto-asset sector already targeted by such campaigns following the Brevo incident.
- Disclosed on
- September 15, 2026
- Incident dated
- September 10, 2026
- Sector
- Digital services
- Country
- France
- Cause
- Third-party provider
Exposed data
- Email address
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Waltio : fuite de données après un accès non autorisé à son compteFuites Infos
- Waltio Confirms Brevo Breach Touched Its User Emails: Here Is What To Do NowCryptoticker
- Questions & Answers - Security IncidentWaltio Help Center
- Waltio frappé par une violation de données et une tentative d'extorsionCryptoast
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact