OpenSea reported that an employee of its email delivery vendor, Customer.io, misused their employee access to download and share email addresses with an unauthorized third party.
