Transak, a leading crypto payment service provider, has suffered a major data breach affecting more than 92,000 users. The incident, which came to light on October 21, 2024, stemmed from a sophisticated phishing that compromised laptop .
See also: USDoD: Hacker behind National Public Data breach arrested
The breach exposed the sensitive personal information of 92,554 users , representing approximately 1.14% of Transak’s total user base. The compromised data includes names, dates of birth, passport details, driver’s license information, and selfies used for Know Your Customer (KYC) verification .
Transak CEO Sami Startstressed that no financial information was accessed during the data breach. “There was no access to bank statements, social security numbers or credit card information, not even emails or passwords, which significantly reduces the severity of the incident,” Start said in an interview.
The company, which provides non-binding fiat-to-crypto for major platforms like Binance, MetaMask, and Coinbase, has taken quick steps to address the situation.
See also: Intesa is being investigated for a data breach by a former employee
Transak has hired leading cybersecurity and forensics experts to conduct a thorough investigation and has begun notifying affected users.
Transak has implemented enhanced security protocols in response to the breach and is working closely with its KYC vendor to identify and fix the vulnerabilities exploited during the attack. According to Transak executives, the employee associated with the data breach has been terminated.
A ransomware group , Stormous , claimed responsibility for the breach, claiming to have stolen over 300 gigabytes of user data.
The group has threatened to leak or sell the remaining data if its demands are not met. However, Transak said it is not considering negotiations with the ransomware group.
See also: Gryphon Healthcare and Tri-City reveal significant breaches
A data breach, such as the one at Transak, occurs when unauthorized individuals gain access to confidential data, resulting in the exposure of sensitive information such as personal identification information, financial records, or proprietary company data. This breach can occur for a variety of reasons, such as weak security protocols, phishing attacks, or malware. The consequences of a data breach can be severe, ranging from identity theft and financial loss to reputational damage and legal implications for organizations. It highlights the importance of strong cybersecurity measures and the need for regular updates to security systems to protect against evolving threats.
Source: cybersecuritynews
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
