A KYC database sold on the Darkweb ?

[Kahoy01]

Hacked Customer Data From World Leading Cryptocurrency Exchanges For Sale On The Dark Web?

https://www.ccn.com/hacked-customer-data-from-world-leading-cryptocurrency-exchanges-for-sale-on-the-dark-web/

"On a darknet market called “Dread,” a vendor going by “ExploitDOT” is attempting to sell user data from the know-your-customer (KYC) data top cryptocurrency exchanges ask for, required by most jurisdictions.

According to data shared with CCN, the hacker has an ad that has been online since July 2018, in which he claims to have hacked documents used in KYC checks – including identity cards and drivers’ licenses – from users of top exchanges like Bittrex, Poloniex, Bitfinex, and Binance.

The data is seemingly for sale for $10 per 100 documents or more, with discounts applying for those who buy in bulk, all the way up to $1 per 1,000 for an order of over 25,000. CCN was able to independently verify the ad on the dark web, which is still online. No links to it will be added to avoid promoting the service."



A few days ago, this also made news :

https://www.techspot.com/news/78317-leaked-database-exposes-87gb-emails-passwords.html

We cannot do something because KYC is part of the  regulations. If we want to protect our identity, then we should not upload our I.D.s in the internet. There are now many rumors that the identity of the KYC participants are been using by other person.  So we shoul be careful on all of our decisions.

[Pursuer]

I participated in many ICOs that requires a KYC. After I readyour post, i feel nervous because I realized that our identity is not safe anymore. There are a lot of buying and selling of identities so it is now not safe to give our identities in excahnges and ICOs.

that is your own fault though because you were blinded by greed!
there simply has never been any reason whatsoever for an ICO to ask for KYC. Know Your Customer laws only apply to things that are regulated and want to follow the regulatory laws. no ICO in the whole world has ever been regulated. in fact they are illegal in most parts of the world!
that leaves only one reason for asking KYC, and that is to sell it and make more profit.

[$anounimus$]

This is like what I worry about a lot of bounty campaign, airdrop and several other campaigns that require participants to do KYC and I think why it should be KYC while your identity is very important even your privacy should be very confidential, after many KYC cases I realized something would happen like this, the identity of many people is sold for crime.

[bitfocus]

Government makes KYC mandatory, exchanges push it to the clients, then hacker gets all the data of those individuals by hacking! Scary!

[DeathAngel]

Government makes KYC mandatory, exchanges push it to the clients, then hacker gets all the data of those individuals by hacking! Scary!

It is worrying yeah. Many here would potentially be at threat of having their identity cloned etc. Let’s hope nobpdy buys it from this guy

[crzy]

I participated in many ICOs that requires a KYC. After I readyour post, i feel nervous because I realized that our identity is not safe anymore. There are a lot of buying and selling of identities so it is now not safe to give our identities in excahnges and ICOs.

Well, this is not new anymore since even banks do this things especially the credit card companies who are sharing the information of their clients, I also believe google are doing this. Its better not to participate on a suspicious campaign for you not to be scared, just try to protect more you wallet.

[Ucy]

I saw that news. It's painful to see this happening. Imagine what the thief could do with this information. It could be for identity theft, terrorism, hacking, and even blackmailing.
I wish current kyc practices is abolished. There are  ico services that are a bit safe. No website should be  allowed to hold people's documents.

[meanwords]

That's kind of scary. That's the reason why I really don't use any projects that involve KYC because who knows where they are going to sell it. Also, it's beating the purpose of being anonymous. One day, Decentralized exchanges will take over the market.

[Stedsm]

I participated in many ICOs that requires a KYC. After I readyour post, i feel nervous because I realized that our identity is not safe anymore. There are a lot of buying and selling of identities so it is now not safe to give our identities in excahnges and ICOs.

You said that it is now not safe. You meant that before this, was it safe? A straight NO.
Because it had been said many times that providing your KYC anywhere is full of risks of theft/abuse/sale and to remain safe from such problems, you need to trade under limits but you can have multiple accounts to keep your side safe. This is one of the most significant reasons why I'm not supporting regulations; because then, everything will go in the hands of Govs and eventually, even companies will start selling all your crypto-related usage data (they must be doing it already). So, try to save yourself from such attacks, I know that to trade with higher limits on exchanges, you need to verify your account with KYC, but you can also choose to have more than one account (it's illegal over some exchanges to have more than 1 account, but to save yourself from getting your data sold and abused, you can try).

[alrose]

In principle, this was to be expected. The only question is how the data from the stock exchanges fell into the hands of scammers?If this is true then you need clarification from the exchanges on which the documents were stolen.There is another option - this post was written by a competitive exchange and thus it wants to impose an imprint on the exchanges indicated in the post.

[Jet Cash]

I think exe installations are far more worrying. I've been looking for a responsive template for my new Bin This !!! site ( part of the Crypto Coin Tree ), and I found one that looked good, and just what I wanted. I hit download to get the HTML and CSS, and they requested an email address. Well that is fair enough, and a lot of sites do this ( including some of mine ). The email included a download link, and when I went o it, it required me to install an exe routine. I ran from there, and I blocked the site.  I suspect that exe routines will start appearing soon if KYC gets a bad rep.

[CryptoToxicAvenger]

I thought that to provide my personal data to such trusted exchanges as Binance, Bittrex, and it does not carry a big threat. It turns out this is not so. If in such exchanges hackers were able to steal documents, the various projects that require KYC then also should not be trusted.

[NoSkyLimit]

This is super scary to be honest. I have done some KYC on 1 or 2 exchanges back in 2018 but it seems we don't know wich KYC database was compromised... I see this as an attack to our privacy so decentralization is the key of cryptos.

[bering]

That's why some people warn us to not to easily give our KYC to suspicious sites or similar of it and actually i'm not too worried about bounty campaign use KYC because i was never give my KYC before and skipped if there is ICO's for KYC required but currently i was so fear if there is big exchange such as bittrex or poloniex got hack because i was submit my KYC to those exchange to get verified accounts

[proTECH77]

This had been my fear since i joined the world of cryptocurrencies(KYC). Haven some one data on an exchange based on KYC then be hacked by a hacker is very awkward to hear that such sensitive materials are linked to hacker. I will never do any KYC again not even to other good exchange as the case maybe.

[Hueristic]

So is there actual proof?

If so why wasn't it encrypted and where did it come from?

[maldini]

This is one that I don't like about KYC, where our data privacy is threatened. Maybe we feel confident that our privacy data is really safe, but we should also know what risks will occur if our privacy data is hacked. Maybe KYC is one way to gain trust from a platform, but will you immediately trust that platform?

[veleten]

this is one of the resons I'm, against any form of KYC
scary , but quite predictable
it was to happen sooner or later with all of the entities gathering data
almost every exchange and many casinos are collecting your personal data
and I'm sure it is not just one database that is leaked, just the one that is on sale OPENLY
you can be sure there are more circulating if not on darkweb then in some other forums or communities

[Eildosa]

Yes, now you should think about whether to once again send someone your personal data. Even if such good exchanges are under attack, it suggests that the KYC procedure has become dangerous.

[Pumared]

this is one of the resons I'm, against any form of KYC
scary , but quite predictable
it was to happen sooner or later with all of the entities gathering data
almost every exchange and many casinos are collecting your personal data
and I'm sure it is not just one database that is leaked, just the one that is on sale OPENLY
you can be sure there are more circulating if not on darkweb then in some other forums or communities

Part of the common sense of each. You can give your data but you need to understand that it can be sold either by the company or by someone who is supposed to steal data from that company you trusted.