A crypto company has reported a significant data breach affecting more than 92,000 users.
The firm revealed that an attacker exploited a phishing scheme to gain access to an employee’s laptop, leading to the exposure of sensitive information stored within a vendor’s dashboard.
The compromised credentials allowed the hacker to log into a third-party Know Your Customer (KYC) service used for verifying user documents. Consequently, personal details of 92,554 individuals—representing about 1.14% of the company’s users—were exposed, including names, birth dates, passport numbers, driver’s license information, and selfies.
This company offers a platform for users to convert fiat currency into cryptocurrency, making it easier to buy and sell digital assets.
Their service integrates with various crypto wallets and decentralized applications (DApps) like Binance, MetaMask, and Coinbase. Importantly, the company confirmed that no financial information was compromised in the breach, stating:
“After our thorough checks, we can confidently confirm that no financially sensitive information, including email addresses, phone numbers, passwords, credit card details, Social Security Numbers, or any other financial data, was compromised in any way.”
Affected users will be contacted directly, and the company noted, “If we do not email you, then you have not been affected.” They have also notified data protection authorities in the UK and relevant regulators in the EU and the US.
A U.S. court has handed down a 30-year prison sentence to Mohammed Azharuddin Chhipa, who was found guilty of financing terrorism through cryptocurrency.
A major chapter in crypto’s legal reckoning closed this week as Alex Mashinsky, once a prominent name in digital lending, received a 12-year prison sentence.
Former Celsius CEO Alex Mashinsky is asking for a significantly reduced prison sentence ahead of his May 8 sentencing, with his legal team pushing back hard against the U.S. Department of Justice’s call for a 20-year term.
The legal battle against the creators of Samourai Wallet has taken a sharp turn, as defense attorneys accuse federal prosecutors of suppressing a key legal interpretation from the Treasury Department that could dismantle the core of the government’s case.