Crypto casino Stake has warned users about a data exposure incident following a security breach at its third-party analytics provider, Mixpanel. The company confirmed that hackers accessed limited user information, including:
- username
- email addresses
- dates of birth
- phone numbers.
Player funds and passwords were not compromised according to a message sent to customer by Stake.
Third-party issue
Stake stated that its own platform and infrastructure were not breached, and the incident was fully contained within Mixpanel’s systems. According to the company, Mixpanel was compromised through an SMS phishing attack targeting its employees, which allowed unauthorised data export. Mixpanel has contained the incident and is cooperating with law enforcement.
Stake advice
Stake advised users to remain vigilant against phishing attempts and impersonation scams, recommending the use of passkeys or two-factor authentication. The breach at Mixpanel in early November 2025 has impacted several other high-profile companies. Security researchers have linked the attack to the ShinyHunters cybercrime group.
Reacting to the development, Stake said:
Mixpanel has no access to Stake’s infrastructure.
This breach occurred in Mixpanel’s systems and impacted multiple companies that use their services. Stake’s platform and infrastructure were not accessed, and your password and funds remain secure.”
