Bitcoin Forum

Last night Experty ICO database was hacked, and all private information was stolen. Experty team approved that passwords were not stored in plaintext so they are safe.
All KYC information was colleted by Bitcoin Suisse, so it's also safe.
Almost every ICO requires to pass KYC so how to keep your data safe? It can happen to another ICO and the impact can be much worse.

Indeed, I received an email from experty.io today.
I was skeptical and eventually found out that it was a fake email, but it has been found that many people started sending ETH to the ETH address.
This is scary. When these excellent ICO projects are stolen from the database, our KYC data may be sold.

When I received the email, I felt suspicious and did not send any information or ETH. It's worrying about this.

Impotant news due that last time more and more ICOs requested personal information of participants. So this ICOs should improve their securuty systems before to request such information.

I've only seen their announcement regarding to the fake e-mails asking to send funds when the presale is already over: https://medium.com/@experty_io/experty-official-security-announcement-db2bb1e66de7
So if the passwords and KYC are safe then what private information was stolen? It seems to be a failed attempt if no one was stupid enough to send money to the e-mailed address after the tokensale.

It was the most professional scam email I have seen so far. They at least got pledged contribution amount, the registered mew and of course your email. They say bitcoinsuisse did not get compromised but for me any further participation in experty ico is out of question. I do not trust them any more. They should have asked Hacken or other cybersecurity to check everything.

It is a good idea to be verified by third party and use your verified identity in other ICOs.

We need a third party is required to collect and verify KYC data.
Otherwise, our KYC information is too dangerous to be used by criminals at any time.
The fact that experty.io data leaked made me wary.

I love crypto and I love the decentralization... no longer should we rely on central banks to give us access to new business opportunities.  That said, the lack of discipline in many of these ICO's is very concerning.  Everyday it seems like there's an ICO hack, scam, or huge failure.

**May I add that DeepOnion's airdrop campaign for productive community members is better and safer than throwing millions at a barely known project team**

That's why i never joined an ICO that is asking my personal stuffs, these KYC stuffs is counter productive on why crypto currency was invented.

Those Personal Information will be worth alot of $$, it can be used as a marketing materials to promote another ICO, Its always best to use disposable email address.

You must be cautious when posting your official information on the internet! Any information can be obtained for tracking, insight or more! Internet is fast and attractive but not paying attention will be really insecure.

Guys, team offers ICO as 'team of experts' but can not do well-protected site for this? And they named self 'experts'? How it can be? May be they need some more prepare before start anything? No?

Maybe they are experts of ICO but not web development :D

Seriously, DeepOnion signature campaign participants are like a cult. It's been months and the spam still doesn't end.
What does your failure of a privacy coin has to do with an ICO related incident, deeponion doesn't even conduct an ICO.

This is where vendors like SelfKey a blockchain based ID verification system can prevent or mitigate these types of disasters. Anything on a database can be hacked but not  on a blockchain. Polymath a securities based company with one of the biggest token sales planned is using Selfkey for KYC.

"Hacked" "Safe"

Two words that don't belong together. It's black and white, all your info is now being sold on the darkweb as we speak

Regardless whose fault is it, it is still unfortunate to hear this.

Amidst many ICOs been scams, it's sad to see others being hacked.

A lot of people are making ICO's now , but most of them are missing strategic thinking :

1.Electroneum , they didn't stopped the Sign up option once the ICO was over ... this caused server problems and delay of the project. Once the project was live they didn't offered something new and atractiv.

2. TheKey very complicated , first KYC approval , after that oversubscribtion and the site went down in a lot of countries , impossible to buy , but they took also personal data.

3. Now this one ...

this is exactly the reason why i do not go on and put personal information into anything that i am not fully sure that my credentials are secured. i never even put personal information on the icos that i happen to invest in. and when i want to invest into some ico that i really love but requires me to send personal info, i just remove it to my list no questions asked. the only things that i have shared personal infos to are my favorite exchanges that requires personal info for valid reasons(also because i cannot fully use their services if i do not verify my identity). and also with the local wallet i currently use.

but to be honest, i do not think that this is much of a problem for some people since they do put out all their personal information on social media sites even when they know that it is not right and that doing it is stupid. they go on and show to the world their private lives with the use of social medias but rant about their personal infos being stolen. just doesn't make sense. it would be easier to understand people that rant about this issue if they do not display personal information on social media sites.

Yes, I already know. Any rubbish and spam already began to come to my mail. It's so unprofessional that I have nothing to say. They lost all personal private data. It's just a nightmare. The project was not bad. I do not know whether to buy tokens or not. It's just frustrating.

Now this is nothing new, the coin. All in the end they say they are hacked to steal anything else.

Sorry, but project bad nevertheless. If they can't safe now where is likelihood that they lose money for example? Fail on this stage is fatal as I think. No chance

 Sources please? Basically the hack seems to be a few email and public addresses for what you are saying. In any case without any sources at the moment falls under "likely to be FUD".

Thank for sharing, anyway they are transparent and all information are on private, Yes it can be happen to other ICO of course so they need strong password for that so hackers won't get any information about them.

I have high expectation for the team and was surprised to received phishing mail from the hackers, when I saw the mail, I knew immediately something was wrong. Most of these ICO developers don't know there is no need tohave something if you can't keep it, I decided against investing in the project because what they were asking for the KYC is too much and doesn't justify investing in the project when there are other projects in the space I can invested into

Omg i have received an email this morning mentioning my contribution details and ask me to contribute now. I am so glad i haven't fall for it.

Aren't there any standard protocols to save personal data securely on a server? Even though some data was encrypted, is there any reason for any data to not be encrypted? I don't know if it's technically possible to have everything encrypted in the database and only decrypted when necessary.

Yes, I also received this letter. But it aroused suspicion. Since my documents are already 3 days on the confirmation. I looked at the purse. In the morning they had already collected 80 Ethereum. Already a lot of people fell into the hands of scammers. Though I hope the documents are safe. It's just frustrating. I will definitely not buy it now.

I assume they were referring to them as Blockchain experts, not neccessarily as security experts. I tend to agree with an earlier poster that if you are not doing your duedilligence and assess most likely risks your project has failed from the getgo. Hacking attacks are unfortunately such an obvious threat that you can't simply ignore it.

Besides, there are experts out there like Hacken and Experty had a lot of time, I signed up for an airdrop 3 months ago, so all that time went by without any security measures to be taken...quite a shame.

In the face of some unprofessional phishing email, to be on guard, do not easily upload your own private key and address.

Ha hs ha! Their team is composed of such experts but still they couldn't protect their own website from hacking! Lol what kind of a world we are living in? They want $20 million for a crap Skype rip off project and they can't secure their website from hackers. What is the point in raising millions of dollars? Totally crappy and bullshit!!!

I also received the warning email and felt bad for everyone that got scammed and hacked. In this crazy world of crypto it seems hacks are happening more and more frequently. That Japanese exchange got hacked for like half a billion around a week ago...

YY, this is exactly why I invested in KYC Legal - https://kyc.legal/

So I'm not going to participate in ICO now.
Because these ICO projects do not guarantee my KYC data security, if it is leaked, it may be very risky, I think it is worth taking risks.
I think we need more regulation or third-party verification of KYC.

It's sad news indeed ,also Japanese exchange also got hack which make they loss more than $ 4 million
Well some people will afraid to invest ICO especially new trader that want to invest ICO meanwhile in other side, ICO able yield more profit compare bitcoin trading in short term.

It is always good to invest in a good and experience  platform,security and safety is always grantee,although is a sad news but at least  investors data,s are safe and that gives a good impression about the platform.