Phone numbers leaked from the Authy 2FA application or used for SMS phishing

ChainCatcher news, according to a report by Cointelegraph, based on a security alert post released by application developer Twilio on July 1, hackers gained access to the Authy Android application database, "able to identify data associated with accounts, including phone numbers."

The post noted that the accounts themselves "were not compromised," meaning that the attackers could not obtain authentication credentials. However, the leaked phone numbers could potentially be used in the future for "phishing and SMS phishing attacks." Therefore, Twilio encourages Authy users to "stay vigilant and be highly alert to any text messages received."

Users of centralized trading platforms typically rely on Authy for two-factor authentication (2FA). It generates a code on the user's device, which the trading platform may require to be entered before executing withdrawals, transfers, or other sensitive tasks.

Authy is sometimes compared to Google's Authenticator app, which has similar functionality.