# Data Breach İlgili Makaleler

Kraken Reveals Extortion Demands After Client Data Incident: ‘We Will Not Pay’, Security Chief Says

Kraken, a major US crypto exchange, has publicly refused extortion demands from a criminal group following two incidents of unauthorized access to limited client support data. Chief Security Officer Nick Percoco stated the exchange identified and terminated access for individuals involved, emphasizing that no systems were breached and user funds remained safe. Approximately 2,000 client accounts (0.02% of users) were affected. Kraken is cooperating with law enforcement and industry partners to investigate what it describes as insider recruitment efforts targeting multiple sectors. The incident has sparked community concerns over insider threats and data security, drawing comparisons to a similar past event at Coinbase.

bitcoinist04/14 14:02

Bitrefill Cyberattack Exposes 18,500 Records, Lazarus Group Suspected

Bitrefill, a cryptocurrency payment platform, was targeted by a cyberattack attributed to the North Korea-linked Lazarus Group on March 1, 2026. The breach, which began with a compromised employee laptop, exposed approximately 18,500 customer purchase records, including email addresses, crypto payment addresses, and IP data. The attackers primarily focused on moving funds from hot wallets and exploiting the gift card system, rather than stealing full customer data. Bitrefill quickly detected the unusual activity, shut down systems to prevent further damage, and has committed to covering all losses with its own funds. The company has since enhanced security measures, including stronger access controls and improved monitoring, and confirmed that most services are back to normal. This was Bitrefill's first major security breach in over a decade.

TheNewsCrypto03/18 13:44

Crypto E-Commerce Platform Bitrefill’s Funds Drained In North Korean Cyberattack

Bitrefill, a Swedish crypto e-commerce platform, disclosed a cyberattack on March 1, 2026, attributed to North Korean hackers linked to the Lazarus group. The breach began with a compromised employee laptop, allowing attackers to access sensitive data, including production secrets. Suspicious purchasing patterns led to the discovery that hot wallets were drained, with funds redirected to attacker-controlled addresses. Approximately 18,500 purchase records were exposed, containing limited user data such as email addresses, crypto payment addresses, and IPs. For about 1,000 purchases, encrypted names may have been accessed. Bitrefill is enhancing cybersecurity through external reviews, tighter access controls, and improved monitoring. The company stated it remains well-funded and will cover losses from operational capital.

bitcoinist03/18 05:02

Bitrefill says attack shows Lazarus Group patterns after hot wallets drained

Bitrefill disclosed a cyberattack on March 1, 2026, in which attackers drained funds from its hot wallets and accessed internal systems. The intrusion began with a compromised employee laptop, leading to the theft of legacy credentials and production secrets. Attackers exploited gift card inventory systems and moved funds to external addresses. Approximately 18,500 purchase records were accessed, including emails, crypto addresses, and metadata, with around 1,000 records including potentially exposed customer names. The investigation revealed similarities with tactics used by the Lazarus Group, though attribution was not definitive. Bitrefill has since restored systems, notified affected users, and strengthened security controls. The company stated it remains financially stable and will cover the losses from operational capital.

ambcrypto03/17 19:42

Trezor and Ledger Users Targeted by Fraudulent Physical Mail Scams

TheNewsCrypto02/16 14:16

Blockchain Lending Platform Figure Hit By Data Breach – Details

Figure Technology, a blockchain lending platform, suffered a data breach after an employee fell victim to a social engineering attack. The breach resulted in the theft of approximately 2.5GB of customer data, including full names, home addresses, dates of birth, and phone numbers. The hacker group ShinyHunters claimed responsibility and publicly released the data after alleged failed ransom negotiations. The company confirmed that its core blockchain systems and financial services remained secure, emphasizing the incident was due to human error, not a technical flaw. Figure is offering free credit monitoring to affected customers and has launched an internal review. The exact number of impacted individuals has not been disclosed.

bitcoinist02/16 10:32

Figure Technology Confirms Customer Data Breach After Social Engineering Attack

Figure Technology, a blockchain-based lending firm, has confirmed a data breach resulting from a social engineering attack. Hackers tricked an employee into providing access, leading to the theft of approximately 2.5 GB of customer data, including names, addresses, birth dates, and phone numbers. The group ShinyHunters claimed responsibility and released the data after the company refused to pay a ransom. No financial information or passwords were confirmed to be compromised. The company has launched an investigation, notified affected customers, and is offering free credit monitoring. Cybersecurity experts emphasize that such attacks target human vulnerabilities rather than technical flaws.

TheNewsCrypto02/14 06:42

Ledger eyes $4bn US IPO as critics question past breaches and new fee strategy

Ledger, a Paris-based hardware wallet manufacturer, is reportedly planning a US IPO that could value the company at over $4 billion. The potential New York listing, which could occur as early as this year, highlights the growing investor appetite for crypto infrastructure firms. Founded in 2014, Ledger has benefited from increased demand for self-custody solutions. However, the announcement has reignited scrutiny over the company's past security breaches, including a 2020 data leak of customer information. Critics have also questioned Ledger's recent decision to introduce new fees for security features, with some viewing it as a value extraction move ahead of the public listing. If the IPO proceeds, investors are expected to closely examine both the firm's growth potential and its historical security track record.

ambcrypto01/23 17:15

From Cheap Customer Service to Billion-Dollar Leaks: The Dual Faces of India's Outsourcing Industry

An investigation into India's massive BPO (Business Process Outsourcing) industry reveals a dual reality of cost efficiency and severe security risks, highlighted by a major data breach at Coinbase. In December 2025, Coinbase’s CEO announced the arrest of a former customer support employee in Hyderabad, India, linked to a $400 million data leak. The employee, working for outsourcing firm TaskUs, allegedly stole and sold user data for substantial personal gain—earning up to 200 times their daily wage per photo of sensitive information. This incident is not isolated. Companies like Amazon and Microsoft have also experienced similar breaches due to insider threats from underpaid Indian外包 employees, who often earn as little as $300–500 per month. Despite these risks, India remains the global leader in BPO, with its market valued at around $50 billion in 2024 and projected to grow significantly. The country’s advantages include low labour costs, English proficiency, and time-zone benefits for Western companies. However, the industry is evolving. Many multinationals are now establishing Global Capability Centers (GCCs) in India for higher-value work like R&D and AI, leveraging local talent for innovation at lower costs. Meanwhile, repetitive low-end tasks face growing competition from automation and AI. While companies like Coinbase continue to rely on Indian outsourcing for economic reasons, the recurring security lapses underscore ongoing management challenges and the human cost behind the industry’s “cheap labour” model.

比推01/06 15:18

India, the Outsourcing Factory of the Crypto World

Coinbase faced a $400 million data breach linked to an outsourced customer support employee in India, highlighting persistent security risks in the global BPO industry. Despite low costs driving outsourcing—with Indian BPO salaries as low as $15 daily—incidents of data theft and internal fraud recur, as seen in cases involving Amazon and Microsoft. India dominates the outsourcing market, valued at $50 billion in 2024, due to its cost-effective, English-speaking workforce. However, the industry is evolving: high-end Global Capability Centers (GCCs) now handle core innovation for giants like Google and JPMorgan, while low-end roles face threats from automation and competition. The balance between cost savings and security remains a critical challenge for firms relying on Indian outsourcing.

marsbit01/06 03:15