Solana Mobile said on September 12 that its account with email service provider Brevo was hit by a security incident affecting some customer accounts, after the company detected unauthorized access and disabled the account.

In its disclosure, Solana Mobile said Brevo, a third-party email service provider, experienced a security incident that affected some customer accounts, including its own. The company said it discovered unauthorized access to its Brevo account and has since disabled that account.

Solana Mobile said it is working with Brevo to investigate the scope of the incident and what information may have been accessed. The company did not disclose how many users may have been affected, what categories of data may have been exposed, or how long the unauthorized access may have lasted.

The company also said it has not confirmed whether any emails were sent from the compromised account, and that verification is still ongoing. In the meantime, Solana Mobile reminded users that it will never ask for recovery phrases, private keys, or wallet recovery information.

Based on the company’s statement, the incident currently appears tied to a third-party communications account rather than a confirmed wallet or on-chain breach. Even so, access to an email account can create a channel for impersonation or social-engineering attempts if user contact data or mailing tools were exposed.

Why It Matters

Security incidents involving third-party vendors can become user-trust issues quickly, especially when the compromised system is tied to direct communications. For crypto-related products, that raises the risk of phishing campaigns that look legitimate even when no wallet infrastructure has been breached.

The disclosure also highlights a recurring operational weak point across the industry: customer-facing crypto brands depend on outside service providers for messaging, support, and account operations. When one of those providers is compromised, the fallout can extend beyond the vendor itself and into the broader security posture users associate with the project.