ChangeNOW said it identified and fixed a vulnerability on October 15 that affected one of the integrations used on its website. The company said the issue was discovered with help from independent security researchers and that it currently has no evidence the flaw was exploited.

Even so, ChangeNOW said it could not assume the reporting researchers were the only people who found the vulnerability. As a precaution, it warned clients that email addresses and transaction details may have been exposed in some scenarios, while stressing that its transaction infrastructure was not affected and customer funds were never at risk.

What the company disclosed

In its announcement, ChangeNOW said it is reviewing possible scenarios tied to the website integration issue after the vulnerability was found and patched. The company did not describe confirmed misuse, but said it considers it important to alert users to possible risks before there is complete certainty about what, if anything, happened.

The disclosure focused on limited categories of information that could potentially have been exposed, including email addresses and transaction details. ChangeNOW framed that as a precautionary warning rather than confirmation of a breach or active exploitation.

Risk now shifts to phishing concerns

Because the potentially exposed information could make fraudulent outreach appear more convincing, ChangeNOW said clients should be alert for suspicious messages. According to the company, a fake email or support contact could reference real transactions or support activity to look legitimate.

The company said users should verify the sender before replying, opening links, or sharing information if they receive an unexpected message that appears to come from ChangeNOW. It also said it contacts clients only through support@changenow.io and will never request a private key, seed phrase, or any password by email.

Funds and core transaction systems were unaffected

A central part of the company’s statement was that the vulnerability did not affect ChangeNOW’s transaction infrastructure. It said customer funds were never at risk, drawing a distinction between the website integration flaw and the systems used to process transactions.

That distinction matters because the notice was aimed at possible exposure of contact and transaction-related information, not at unauthorized movement of assets. ChangeNOW did not report disruptions to its core service in the announcement.

NOW AI launch brought forward after the incident

Alongside the security notice, ChangeNOW said it is launching NOW AI, which it described as a dedicated protection lab intended to raise the security standard across all ChangeNOW products. The company said the new initiative is meant to use AI technology on the defensive side to identify threats earlier and build stronger safeguards into its services.

ChangeNOW linked the timing of the launch to the October 15 case, saying the incident made the need to move faster more obvious and accelerated the rollout. The company also pointed to a broader concern that AI can make malicious activity easier to automate and scale.

What comes next

For now, the confirmed steps are limited: the vulnerability has been fixed, ChangeNOW says it is assessing possible outcomes, and it has warned customers about phishing attempts that could exploit any leaked context. The company said it will publish more details about NOW AI, including its plans, scope, and how it will be used across ChangeNOW products, on a dedicated page on its website soon.

Until then, the main verified takeaway from the disclosure is that ChangeNOW has reported no evidence of exploitation, while still treating the possibility of data exposure seriously enough to notify users and tighten its security response.

Source: cryptopotato.com