Hacker Stole 1,000 Traders’ Personal Data From CryptoTrader.Tax

[sheenshane]

The hackers never do the hard work and have those personal data easily because he knows it already as probably he is on the part of the company. A big question of why hackers know the password? it gives an idea that it was an inside job.

This was my thought, probably the hacking incident was an inside job. How the hacker(s) know the credential info of that trading account website that easily get rid. I dont know whom or where to trust right now, it seems nowadays hackers and gettings smarter. They will do everything just to earn bucks or thousands of bucks in the evil idea.

Good thing funds are safe but the personal info might be sold in the dark web and probably for the hacking purpose. The 1,082 unique email addresses that has been compromised will might in risk, it is probably good if their users will quickly change their addresses.

[1715563218]

1715563218

[Sadlife]

That's why it's not good idea to store private keys especially with a centralized authority holding the data. If they're using Cryptocurrency, why not use Blockchain instead? Rather than, a highly vulnerable database that someone could easily gain access to.
I believe the ETH blockchain enables you to develop smart contracts tailored for your business requirements.

[dansus021]

This was something im worry about. they took email address with and some portofolio about it. what happen if this site has completed KYC and the hacker sell info about it. 


and i'm just curious why hacker keep targeting cryptocurrency site? from the twitter big exchange and now this 

[Leviathan.007]

That's exactly the reason why I hate doing KYC on any exchange. A few years ago even on binance some personal information was leaked. Using these important information gathered from a thousand of user, anyone can abuse the information and take advantage over it or even make some trouble for people. While the hackers can sell these leaked information on environments like darkweb and deepweb for monero or bitcoin. That's why I always said asking for KYC in crypto exchanges shouldn't be happen and that's against the decentralizing.

[Shasha80]

More and more platforms related to cryptocurrency are targeted by hackers, perhaps because cryptocurrency is getting more popular.
But regarding the CryptoTrader.Tax case, if we reads the chronology of events, the first possibility is that it is a weak security system,
make it easy for hackers to steal consumer personal data. Then the second possibility is the possibility of inside jobs, because there
are several strange events related to this CryptoTrader.Tax case. Whichever is the correct possibility does not matter, the most important
is the CryptoTrader.Tax improves security systems, so that incidents like this do not happen again.

[emmaglory5]

More people now will be exposed that they own cryptocurrency and might be personally targeted.

please share with us some security tips

[Bes19]

This is scary coz they might sell these identities and can be use on frauds.
Though this is not the first that this thing has ever happen in other exchanger, but they should improve their security.
Sometimes this could be an inside job but who knows eeehh

[taufik123]

This was my thought, probably the hacking incident was an inside job. How the hacker(s) know the credential info of that trading account website that easily get rid. I dont know whom or where to trust right now, it seems nowadays hackers and gettings smarter. They will do everything just to earn bucks or thousands of bucks in the evil idea.

Suspecting insider involvement in this hacking case may be an assumption that cannot be justified. There are many ways you can do to find out the credential info for a website. Maybe one of the employees was caught in a trap and then accused or clicked on the trap provided by the hacker to get important information about the CryptoTrader.Tax website. Many methods can be done.

currently there are many cases of hacks that are trending with a variety of new methods. hackers are growing, the level of security must also be developed to ward off and fight hackers.

[tbterryboy]

Lots of things are happening and these days people are not safe any longer. All these websites should always try to be very careful with their sites' security to protect their customers so that their information that they have given to the website will not fall into the wrong hands. It’s very bad that some of them are usually less concerned about issues like this until it happens to them and then they will start running up and down.

Sometimes you give your information to a website and the next thing their site gets scammed and you start getting some spam mails from those hackers to get access to your accounts. For example, I do get emails for confirming my details of my blockchain wallet but all of them from blockchain look like domains. If I do not check from where I do get mails then probably I might have lost my blockchain wallet by this time.

[molsewid]

That's the reason why I am afraid of giving my identity or other contact details to exchange websites.  Most of them required us to KYC, but their website is not yet fully secured.  I feel sorry for the victim to their 13,000 rows of information. Hackers will probably sell that or use that in illegal ways.

[Twentyonepaylots]

This was my thought, probably the hacking incident was an inside job. How the hacker(s) know the credential info of that trading account website that easily get rid. I dont know whom or where to trust right now, it seems nowadays hackers and gettings smarter. They will do everything just to earn bucks or thousands of bucks in the evil idea.

Suspecting insider involvement in this hacking case may be an assumption that cannot be justified. There are many ways you can do to find out the credential info for a website. Maybe one of the employees was caught in a trap and then accused or clicked on the trap provided by the hacker to get important information about the CryptoTrader.Tax website. Many methods can be done.

Inside job won't be out for some of us to buy this assumption since the hole was found in that area. And for an employee of a crypto related company should be wary of the whole scheme of traps in the internet, I'm skeptical about the silly situation where an employee accidentally clicked a random link. bruh.

currently there are many cases of hacks that are trending with a variety of new methods. hackers are growing, the level of security must also be developed to ward off and fight hackers.

I agree, along with the improvements of security systems the breaching methods are developing too. This is why I also doubt of crypto adoption as early as a year or two because of this stuff.

[peter0425]

This is a threat to those Crypto users that has been exposed since their Data is now compromised from this hackers.
they might be a Victim of Force to take their crypto away from them,The CryptoTraders must have a insurance towards those who had been compromised that if there something happen to their crypto asset at least they will have assurance of claiming some lost.
this is not the Peoples mistake instead it is the company that is lazy to make high security in their platform.

[taufik123]

-snip- I'm skeptical about the silly situation where an employee accidentally clicked a random link. bruh.

That possibility could be if the employee did something careless that got him into a trap.
Anyone who enters the world of the internet is at risk, even if he is an expert in the internet field.

-snip-This is why I also doubt of crypto adoption as early as a year or two because of this stuff.

The current adoption of crypto is still the pros and cons, because of the security and risks behind cryptocurrency.
Crypto still needs development, maybe in the future crypto regulation and security will increase more than it is today.

[pawanjain]

If the hacker was able to get the passwords from the stolen data then it's clear that their security was weak.
Even if someone access the database then the password should not be so easily retrieved.
Developers generally hash the passwords so that it cannot be stolen easily.
This shows how weak security the exchange had. I guess this is why the hacker chose this site for their attack.

[Lucius]

More people now will be exposed that they own cryptocurrency and might be personally targeted.

What then to say about Ledger and their data leak which compromised about 1 million user emails, and in addition for 9500 people all personal data including full name, address and phone number were stolen. When I see these only 1000 potentially vulnerable clients it seems like a drop in the ocean, of course I'm not happy that it happened - but there are a lot of worse cases that have compromised the security of crypto users.

In addition to hacking databases, it should be taken into account that our data is also subject to trade between companies - they of course always deny it, but if they are discovered they claim to have been hacked...

[Anonylz]

People's personal information keeps getting compromise every time when this platform owners fails to have a strong security, why does it feel like a deliberate act, why is it so easy this days to get hacked even though security should be a top priority.

[Lucius]

Anonylz, It is a well-known fact that humans are the weakest link in the security chain no matter how it is conceived and set up. If you have, say, a hundred employees, 99 of whom are honest and conscientious and know what they are doing - and you have one with bad intentions who has access to all databases, then all security procedures make no sense.

Take, for example, what Snowden did to one of the world's most powerful security agencies when he took a pile of confidential documents and handed them over to the media - who could have ever predicted and prevented that?

[DraGonD]

Thats why is better to not share with anyone any kind of personal data in crypto

[roadrunnerjaiv2025]

The damage doesn't seem to be that serious, but I guess we can only see that when the hacker starts using the data they stole to their advantage. I bet it wasn't the core of the company's security system that was breached but just one employee's account. I wonder if "took steps to improve security measures and monitoring systems across internal and third-party applications" also includes informing the owners of the compromized accounts and compensating those that took a huge toll from the breach.

[wxa7115]

this is yet another reminder to use a different email address for every service though---if it gets leaked, no big deal.

And in fact this is possible, just create as many protonmail emails as you want. Though if they only stole email addresses and names then the worst they can do with it is get revenue by selling them to marketers that will send you spam offers. That would be pretty juvenile of them.

While this is correct for the most part people are very lazy when it comes to their security, they prefer to use one email for every single one of their accounts and even sometimes they use the same password, I have no doubt that the hackers know this and they are trying to get access to all the accounts they got in this hack to try to steal money or even more information out of them.

And this is something that I have always found confusing, it is true that it is a little bit more of work to create more email accounts and different passwords for each one of your accounts but it is completely necessary, because in this market once you lose your coins you lose them for good with no possibility to get them back.