Crypto Firm Faces Data Breach, Exposing Private Information of 92,000 Users

A crypto company has reported a significant data breach affecting more than 92,000 users.

The firm revealed that an attacker exploited a phishing scheme to gain access to an employee’s laptop, leading to the exposure of sensitive information stored within a vendor’s dashboard.

The compromised credentials allowed the hacker to log into a third-party Know Your Customer (KYC) service used for verifying user documents. Consequently, personal details of 92,554 individuals—representing about 1.14% of the company’s users—were exposed, including names, birth dates, passport numbers, driver’s license information, and selfies.

This company offers a platform for users to convert fiat currency into cryptocurrency, making it easier to buy and sell digital assets.

Their service integrates with various crypto wallets and decentralized applications (DApps) like Binance, MetaMask, and Coinbase. Importantly, the company confirmed that no financial information was compromised in the breach, stating:

“After our thorough checks, we can confidently confirm that no financially sensitive information, including email addresses, phone numbers, passwords, credit card details, Social Security Numbers, or any other financial data, was compromised in any way.”

Affected users will be contacted directly, and the company noted, “If we do not email you, then you have not been affected.” They have also notified data protection authorities in the UK and relevant regulators in the EU and the US.