Crypto.com, personal information of some users leaked in unreported hack

JH Kim

Summary

Global crypto exchange Crypto.com said that some users' personal information was leaked in an unreported cyberattack.
Crypto.com said customer funds were not leaked and that only a very small amount of personal data was affected.
On-chain analyst ZachXBT pointed out that Crypto.com did not disclose this attack and that the exchange has previously been hacked several times.

On the 22nd, according to the cryptocurrency-focused media The Block, global crypto exchange Crypto.com had some users' personal information leaked in a previously unreported cyberattack.

The incident is reported to have occurred after teenage hacker Noah Urban of the cybercrime group 'Scattered Spider' and accomplice 'Jack' hacked Crypto.com employee accounts.

They obtained security data through phishing attacks and gained access to personal information by compromising employee accounts. However, Crypto.com stated, "Only a very small amount of personal data was affected, and customer funds were not leaked."

Urban had $4 million worth of crypto assets, cash, and precious metals seized in an FBI search in March 2023, and was arrested in January 2024. He was charged with involvement in hacking 13 companies, pleaded guilty, and was sentenced to 10 years.

Meanwhile, on-chain analyst ZachXBT criticized, "It is a problem that Crypto.com did not disclose this attack," saying, "This exchange has already been hacked several times."