Ice Open Network insider breach leaks emails and 2FA data

Ice Open Network ($ION) says it suffered an insider data breach on April 15, involving unauthorized access to users’ identity information. The leak reportedly included emails and 2FA phone numbers, plus identity/public key material. Ice Open Network stressed that there is no evidence of fund theft and no access to private keys or wallets. The company attributes the incident to a server breach tied to its identity database. It claims the hackers were not Ice Labs employees, but four former third-party contractors of a service provider responsible for operational coordination and public relations. Ice Open Network has traced the parties involved and is pursuing legal action, including a complaint to the UK Information Commissioner’s Office (ICO) and a criminal complaint. For remediation, users are advised to immediately update 2FA settings for both email and phone. Ice Open Network also plans a migration on its Online+ platform on April 21, which could cause temporary downtime or loading issues, while stating core functions remain unaffected. Broader context: April 2026 has already been an unusually active month for crypto security incidents. In the first 18 days, crypto protocol hacks reportedly caused $606.2 million in losses across 12 attacks (about 3.7× the total for all of Q1 2026). Separately, KelpDAO was hacked for $293 million earlier in the period, and the article notes a LayerZero-related spoofing vector. Overall, this is an Ice Open Network insider data breach focused on identity and 2FA exposure, not on direct on-chain fund compromise—yet it may still heighten security-related risk sentiment across the sector.