SECURITY NOTICE: PHISHING CAMPAIGN TARGETING OUR USERS– WHAT YOU NEED TO KNOW

We want to inform our community about a recent phishing campaign that affected a segment of our users. At STOKR, transparency and user safety are core to our values, and we believe it's important to keep you informed about incidents that may impact your data.

What Happened

On June 9, 2025, 21:09 (CEST) we began receiving reports from users about suspicious emails impersonating our brand. These messages attempted to deceive users into clicking malicious links or sharing personal information.

Our internal investigation revealed that these phishing emails were primarily sent to older user accounts.

Our Findings

​

While our internal systems remain secure and uncompromised, we believe that the email addresses targeted in the phishing campaign may have been leaked via a third-party service we used in the past.

Specifically, we suspect the source of the exposure may be related to MailerLite, a platform we previously used to collect and manage subscriber emails. In January 2024, MailerLite experienced a data breach that affected many of its clients, especially those in the crypto space, which aligns with our business profile. You can read their official statement here.​

What You Should Do

​

If you’ve received any suspicious emails that appear to come from us, do not click on any links or share any personal information. Instead, forward the message to our data protection team at [email protected] and delete it immediately.

We recommend all users, especially those with older accounts, to:

• Enable two-factor authentication (2FA) on their accounts.
• Change passwords if reused elsewhere.
• Stay cautious of unsolicited emails asking for sensitive data.

What We’re Doing

• We’ve launched a full review of all third-party vendors and services historically used for email collection.
• Our team is actively monitoring for further phishing attempts and related threats.
• We’re notifying affected users directly and providing guidance on how to stay protected.
• We’re filing the appropriate data breach notification with the relevant Data Protection Authority.

Our Commitment to You

​

We take the protection of your personal information very seriously. While the source of this incident appears to be external, it reinforces our ongoing commitment to auditing, minimizing, and securing data exposure — past and present.

We’ll continue to provide updates if new information becomes available.

Thank you for your trust!

By Lukas Cremer 

Technology lead

If you have any questions or concerns, feel free to contact us at [email protected].​​

​