Solana Mobile has suspended its marketing email account at Brevo, a third-party email provider, after discovering unauthorized access to the account during a wider security incident.
The breach at Brevo affected 138 customer accounts through a vulnerability in Security Assertion Markup Language Single Sign-On (SAML SSO) infrastructure. According to Brevo, six of the compromised accounts were used to send phishing emails to stored contacts, while 43 accounts had their contact lists exported. The remaining 93 accounts showed no meaningful unauthorized activity.
Solana Mobile, which manufactures cryptocurrency-focused smartphones for the Solana ecosystem, stated that it identified the unauthorized access, disabled the account, and is working with Brevo to determine what information was accessed. The company said that to its knowledge, no emails were sent from its Solana Mobile account, though verification efforts are ongoing.
In a statement, Solana Mobile reminded users that the company will never request seed phrases, private keys, or wallet recovery details.
Brevo acknowledged the security failure in its response to affected customers. The company noted that the phishing emails sent through compromised accounts appeared genuine because they were transmitted through legitimate infrastructure and passed standard email authentication checks. Brevo stated it has disabled all links in those emails and advised customers not to click them as a precautionary measure.
