Crypto Investment Fund Suffers Hack Exposing Data of 266,000 Users: Report

Within the newest privateness breach to hit the cryptocurrency house, Malta-based Trident Crypto Fund has suffered a serious information leak, Russian newspaper Izvestia studies on Thursday. 

Ashot Oganesyan, CTO of cybersecurity agency DeviceLock, informed the publication that the non-public information of about 266,000 folks registered with the fund was posted on various file-sharing web sites following the breach. 

The stolen database, together with electronic mail addresses, cellphone numbers, encrypted passwords and IP addresses, was posted on-line round Feb. 20, together with the outline of the web site vulnerability that made the breach doable, Oganesyan mentioned. On March 3, the unknown hackers decrypted and revealed a dataset of 120,000 passwords, he added.

Izvestia reached out to one of many people on the database who confirmed a connection to Trident Crypto Fund, although he’d solely registered for a seminar hosted by the agency and didn’t make investments.  

The fund doesn’t listing its crew members on the web site and has no presence in LinkedIn. It’s unclear the place the fund is registered or bodily positioned. Based on Crypto Fund Analysis, the fund is predicated in Malta. It affords shoppers funding in a “prime 10 crypto” index calculated by the fund itself.

There have been no official bulletins of the information breach on the fund’s web site or in its Telegram group as of Thursday morning European time – when the information was first revealed.

Trident has not but responded CoinDesk’s requests for remark by way of electronic mail, Telegram and Fb. 

Final week, decentralized derivatives trade Digitex additionally suffered a leak of consumer information, although it mentioned in all probability solely electronic mail addresses had been misplaced in a theft attributed to an ex-employee.

Binance, the most important crypto trade by buying and selling quantity, additionally noticed verification particulars of presumably 60,000 customers allegedly made public final summer season. The agency mentioned the KYC information didn’t match its personal, nevertheless, and prompt it was not the supply of the breach.