From the rather mixed messages people have been getting so far I've managed to get from them,
A 3rd Party suppler was phished to gain access.
Leaked info
- Name
- Address
- IBAN number
- Portfolio Data
Not confirmed
- Email
- Credit card details if used
NO coins were at risk.
Also if you ask too many questions on twitter you get blocked by them. They will give out snarky reply if you ask about bank details I got "No they don't know your passwords and bank details... Did you ever give your banking login to us? I don't think so.". I also asked about ID I got some nonsense about we don't store social security numbers???.
They also think its not an issue to have personal IBAN made public. While there shouldn't be a threat to losing funds in a perfect world it has put my account and others at risk. With names and addresses combined with IBAN you have 90% of the details needed. IT would take little effort to fool someone to steal funds here in the UK its rare to give out those details.
They told us to reset 2FA as a precaution.