Data of 200 Thousand Crypto Users Put Up for Sale
Table of Contents
The hacker, who hacked the data of the official Ethereum forum in 2016, took possession of information about crypto-exchange clients, financial services, and electronic wallets.
Personal data of more than 200 thousand users of crypto exchanges, applications, and wallets are put up for sale. Perhaps this is due to a hacker who hacked the database of the official Ethereum forum in 2016. According to the vulnerability monitoring service Under the Breach, an attacker offers to buy user data from Ledger and Trezor. The companies deny the leak.
Both of which obtained from a @Shopify exploit.
(suggesting there are many more underground leaks).
— Under the Breach (@underthebreach) May 24, 2020
The list contains data from users of the KeepKey hardware wallet, as well as BnktotheFuture, LoanBase platforms. According to other sources, the hacker advertises databases of 18 cryptocurrency exchanges and forums, including Korean Korbit and Mexican Bitso.
The hacker claims that the database contains names, physical and email addresses, as well as phone numbers. According to him, information about users Ledger, Trezor, and KeepKey was obtained due to a vulnerability in the Shopify platform through which they are sold. Trezor emphasized that they did not use Shopify to sell their products.
How the data of users of other platforms were obtained, if his statements are correct, remains unclear.
Representatives of Ledger meanwhile declare that the database offered for sale does not correspond to the real one. Nevertheless, the French company emphasizes that it continues to investigate the incident and treats it with complete seriousness.
Rumors pretend our Shopify database has been hacked through a Shopify exploit. Our ecommerce team is currently checking these allegations by analyzing the so-called hacked db, and so far it doesn’t match our real db. We continue investigations and are taking the matter seriously.
— Ledger (@Ledger) May 24, 2020
ShapeShift, the parent company of KeepKey, has not yet commented on the situation. Also, representatives of BnkToTheFuture and Bitso did not react to this news.
Early Data Theft
Earlier, a group of hacker-extortionists REvil promised to publish 756 GB of data, including the “dirty secrets” of US President Donald Trump. Attackers demand a payout of $ 42 million in Bitcoin or Monero. Information was obtained as a result of the hacking of the New York law firm Grubman Shire Meiselas & Sacks.
Disclaimer: Bitxmi News is a news portal and does not provide any financial advice. Bitxmi's role is to inform the cryptocurrency and blockchain community about what's going on in this space. Please do your own due diligence before making any investment. Bitxmi News won't be responsible for any loss of funds.