Hacked Customer Data From Cryptocurrency Exchanges For Sale On The Dark Web?

[Zed0X]

Hacked Customer Data From World Leading Cryptocurrency Exchanges For Sale On The Dark Web?



On a darknet market called “Dread,” a vendor going by “ExploitDOT” is attempting to sell user data from the know-your-customer (KYC) data top cryptocurrency exchanges ask for, required by most jurisdictions.

According to data shared with CCN, the hacker has an ad that has been online since July 2018, in which he claims to have hacked documents used in KYC checks – including identity cards and drivers’ licenses – from users of top exchanges like Bittrex, Poloniex, Bitfinex, and Binance.

The data is seemingly for sale for $10 per 100 documents or more, with discounts applying for those who buy in bulk, all the way up to $1 per 1,000 for an order of over 25,000. CCN was able to independently verify the ad on the dark web, which is still online. No links to it will be added to avoid promoting the service.



A cybersecurity expert who contacted CCN and chose to remain anonymous has detailed that after contacting the individual posing as a buyer, he was able to get three free samples out of him as proof that the leaked documents are legitimate.

As proof, the cybersecurity expert got pictures of individuals holding up a piece of paper with the word “Binance” and the date the picture was taken at. In these pictures, their faces are visible, as well as their identity cards or drivers’ licenses.

CCN had access to these images, which appear to be legitimate. Although the sample was small, the vendor selling the hacked data claims it has documents from people in every country cryptocurrency exchanges serve.

An exchange the security expert allegedly had with Binance via email, which couldn’t be independently verified, seems to show the latter found “some inconsistencies” between the data it was presented with and the “samples provided” – presumably the KYC images.

The exchange’s spokesperson allegedly further noted they have their “theories in regards to how this information may have been obtained,” detailing that no signs of unauthorized access to their system had been found. CCN has reached out to Binance to clarify the situation but hasn’t heard back at the present time.

Binance is notably an exchange praised in the cryptocurrency community for its security practices. Recently, It foiled the plans of the Cryptopia hacker by freezing the stolen cryptocurrency, and last year thwarted a large-scale attack that saw Syscoin (SYS) surge on its platform.

Whether the leaked documents are connected to the recent ‘Collection #1’ 87 GB database leak, which includes over 700 million email addresses and 21 million passwords, isn’t clear.


https://www.ccn.com/hacked-customer-data-from-world-leading-cryptocurrency-exchanges-for-sale-on-the-dark-web/

[Alcor]

Yes, the situation is very bad. Our data, which we leave as a KYC check, will periodically appear in scammers and other criminals. Therefore, it is very risky to transfer our data to the ICO teams. It is vseravno that transfer them directly into the hands of fraudsters. Of course, it’s well done on this forum that it is possible to pass such a KYC check on the forum and after that there will be no need to constantly go through the same checks when joining specific ICO projects. I hope this will save us from many problems in the future.

[bubblebubble]

I was posting the news in the Italian section.
Bad notice that can let market goes deeper!
I'm worried for my sensible datas! 

I hope someone pays for this fail and negligence.

[Danezu]

It was inevitable that it would happen sooner or later. Those prices seem ridiculously low.

[Zed0X]

It was inevitable that it would happen sooner or later. Those prices seem ridiculously low.

What do you mean? Are you putting a price tag on personal information? Those are stolen data, the price is the least of your worries