The Gemini product security team published a short notice that an unnamed third-party vendor suffered an "incident" that allowed an unauthorized actor to collect email addresses and incomplete phone numbers belonging to some Gemini customers.As a result of the breach, customers of the crypto exchange received phishing emails.The goal of the attacker has not been disclosed but such access to accounts and financial information is typically what threat actors are after.In October, another post was published from a different alias claiming that the data was from September.Yet another post under a different username (now banned on the forum) appeared in mid-November, offering databases from multiple crypto exchanges, including one from Gemini that supposedly had the same type of information for 5.7 million users."