A KYC database sold on the Darkweb ?

[DevilSlayer]

Hacked Customer Data From World Leading Cryptocurrency Exchanges For Sale On The Dark Web?

https://www.ccn.com/hacked-customer-data-from-world-leading-cryptocurrency-exchanges-for-sale-on-the-dark-web/

"On a darknet market called “Dread,” a vendor going by “ExploitDOT” is attempting to sell user data from the know-your-customer (KYC) data top cryptocurrency exchanges ask for, required by most jurisdictions.

According to data shared with CCN, the hacker has an ad that has been online since July 2018, in which he claims to have hacked documents used in KYC checks – including identity cards and drivers’ licenses – from users of top exchanges like Bittrex, Poloniex, Bitfinex, and Binance.

The data is seemingly for sale for $10 per 100 documents or more, with discounts applying for those who buy in bulk, all the way up to $1 per 1,000 for an order of over 25,000. CCN was able to independently verify the ad on the dark web, which is still online. No links to it will be added to avoid promoting the service."



A few days ago, this also made news :

https://www.techspot.com/news/78317-leaked-database-exposes-87gb-emails-passwords.html

I do not send my identity in exchanges because I know that there possibilities that my identity will be hacked. I became more scared because of what I have read. I will never send my identity because most of it are being sold in darkweb.

[Kelvinikke]

This does not sound very well at all for crypto activities and this is one of the main reasons why i don't like projects involved in KYC. And the most annoying thing is that you only earn pennies for selling such a vital information out there. this could pose some security threats in case these details fall into the hands of a wrong person.

[GrayFullbuster]

KYC is really something. I do not upload my identity to exchanges because I feel something fishy. I do not trust this exchanges because I know that their securities are too weak and there is high chance that our identity will be stolen by others.

[kakonhat]

This is very scary news. If those documents are real then it will dangerous for our identity and safety. Law should be applied to them who are responsible for this.

[sehoon]

it's something scary, now KYC can also be hacked, I really don't think the darkweb site is really dangerous

No, dark web is a really dangerous site. There are a lot of illegal things that are ongoing there and anyone who gets there can get involve in crimes. Now, this proves a lot of things about KYC. It is not good and it is not safe. As a bounty hunter, we should not deal with KYCs anymore because of the risks.

[freedomno1]

That's the weakness of KYC and we had a taste of it when facebook got hacked and another one when this forum's database got stolen. I miss the times when we could trade freely without having to deal with KYC on sites like bittrex and poloniex, but things change. Unfortunately, in most cases they change for the worse.
I used to be and still am against KYC and government agencies trying to oversee crypto trading, but reading the posts of some forum members here makes me thing that I'm in the minority. 

Your not in the minority, it's just a necessary evil we deal with. Personally I'm not a fan of KYC it can at times make things more of a headache when funding to exchanges than it can help. It is a matter of trusting the central authority in charge of the KYC processing to be able to protect your information since if it leaks that is a new juicy database that will show up on the net.

[Accounting87]

OMG but who can we make sure our data is safe and buy crypto at the same time? Do you guys know trustworthy protection systems and/or exchanges?

[mangsitin]

On the internet like this we have to be more careful in entering our data, because we do not know what will happen if we give our data to unknown people, our data may be used as a tool to commit crimes, so we ourselves will become victims, so we shouldn't give our data to others.

[eaLiTy]

That's the weakness of KYC and we had a taste of it when facebook got hacked and another one when this forum's database got stolen. I miss the times when we could trade freely without having to deal with KYC on sites like bittrex and poloniex, but things change. Unfortunately, in most cases they change for the worse.
I used to be and still am against KYC and government agencies trying to oversee crypto trading, but reading the posts of some forum members here makes me thing that I'm in the minority. 

Everyone likes to trade freely without any obstacles and no one in the right mind would want his identification details published to anyone, there must be a precedent on how they are going to secure the sensitive information they are collecting and if they are not able to do so there must be hefty fine so that these events does not happen and they will be more vigilant on how these information are stored. I really liked the earlier days where we could create account and start trading but things are changing for the worst and that is the world we have to accept.

[metalglowd]

and finally, the worst fear of KYC was released. What needs to be asked is how the exchange can concede their user data. Does each exchange have a very naughty insider to distribute the data to other people for sale or indeed there are hackers who are able to hack the exchange only for their data ?

[jerrison]

i believe every letter that has been said in this as i have started receiving emails from people i am very sure of not having anything to do with, both individuals and corporate bodies relating with me as though they have my details and they come so strong that you will think you have visited and office with such identity. this should be curtailed

[jcmansah7]

To save you the trouble of losing your sensitive information to the general public i don't engage in  bounties which require KYC because it is very sad to hear that such a vital information is just being sold on the Darkweb.

[samuraijin]

This should be considered by most people who want to invest in using KYC or trading on a trade that is required to do KYC, if it is not done, chances are that our money in trading is likely to be lost and investment money will disappear, so there are many options for solve this problem and look for trusted trade and investment that is truly, store user data properly and so that it is not misused, by irresponsible individuals ...

[shoreno]

To save you the trouble of losing your sensitive information to the general public i don't engage in  bounties which require KYC because it is very sad to hear that such a vital information is just being sold on the Darkweb.

Not all scam ico's will sold your profiles because some maybe using them for personal preference  .  not all ico are also scam therfor its okay to take risk and apply for a kyc oriented campaigns . its actually optional because there were also campaigns that did not require a kyc at all but that does not mean that they are legit   .  scammings and other nefarious crimes online are normal but they are avoidable

[Harkorede]

To save you the trouble of losing your sensitive information to the general public i don't engage in  bounties which require KYC because it is very sad to hear that such a vital information is just being sold on the Darkweb.

I'll consider this the safest approach, considering how most of these so called bounties turns out to be either scam or just come up with flimsy excuses why they had to cancel or suspended the ICO indefinitely, they end up never coming back. And no one knows how far those hackers or buyers are willing to go with such informations but I can tell it is never a good sign.

[adrianto1995]

Sounds bad, I bet there are my KYC data on this seller... 
Because I have experienced pass the KYC procedure on Bittrex and some ICO's that I have joined for the bounty...

For now, it almost every legit bounty project that I have to join always ask me for KYC. I personally too lazy to giving them my personal data but I have no choice if I want to get my reward I should pass it... 

[Myown55]

I have never supported the idea of KYC in the cryptocurrency world. Now, the technology can be hacked. what is the essence then. I think KYC  should be stopped. I see it as useless.

[FUD Expert]

I think most of exchanges put more layer of security to protect their exchanges with the wallets and tokens they managed and the kyc documents is least of their priorities. But I hope exchanges are smart enough to request clever ways of approving kyc like writing dates on a piece of paper for greater proof.

[tumis]

Recently Loyakk (they collected more than 16 million in the ICO) wanted KYC from all bounty hunters (of course they informed about it after 8 months bounty period at the very end). They set a deadline of about 3 weeks. And best of all - they collected all documents via google form.

A similar case of DATABLOCKCHAIN . Here is my topic -> https://bitcointalk.org/index.php?topic=5099688.msg49319218#msg49319218 Several bounty campaigns. Also at the very end they don't issue tokens. They say something about "shares" Of course they all want KYC.


So many bounty campaigns for nothing (Sidera, Introa, Humancoin, Trustlogic and much more) . Hundreds of heavy hours of translation work. 90 % is fraud. The rest doesn't pay. They steal your documents. They are blatantly lying.
Many of these scammers have a proven identity on icobench. In my opinion (and I have more than 90 projects behind me) icobench is closely related to these scammers.

=====

Who invented this KYC in crypto world
After all, this is the gate for real criminals to completely whitewash

[hxtop]

Sadly, "know your customer" issue became known by anybody . What a bad thing that for us. Our private data is on hackers' hand and they are gaining money by selling this data. Unfortunately, companies want to know very much about their customers and they have detailed database. As you know there is a principle which is called "the principle of least privilege" (PoLP). I think, this principle must be implemented strictly. By doing this, we are not going to be under thread, even though hackers reach to data, because this data is limited.