My email and phone have been hacked, is my bitcoin safe?

[kiddex]

Hi there tonight i found out my email was hacked and the password changed. i also watched in real time as the hacker went to my binance and bittrex accounts and changed the passwords and then logged into them. He also hacked into other crypto related websites i deal with. Thank God i had no crypto on either of these exchanges so the thief wasnt able to take anything. i have a feeling this information for them to use against was because of the ledger data leak, i was one the people who's data was breached. So i have a question if they can do all this what if they get on my ledger live. Is my bitcoin safe? i understand that they need the 24 word phrase seed to enter it but all this has left me unsure. I did manage to get an ip address from this guy but i know they can fake that kind of stuff so i dont know. What do you guys think i should do plz help thanks.

[1715666038]

1715666038

[1715666038]

1715666038

[ranochigo]

You have to determine the source of the compromise. Was it compromised solely because of the information being used for the Ledger Live leak or because of some other sources? How do you know your phone was hacked?

I would recommend for you to wipe your computer and your phone. I suspect that there is a high chance that you have a malware on the devices as opposed to your accounts being SE'ed. Ledger should generally be safe from such attacks. Seeds are never exposed outside of your devices and please don't key it into your computer either.

[kiddex]

Earlier this morning i got an email which i thought was from ledger saying that  "withdrawal delayed" so i opened it and it said someone from the ukraine was trying to withdraw from my ledger. So i got scared and clicked on the cancel button and it didnt do anything but bring me to a broken link. Thats probably how this came about somehow.

[YOSHIE]

If your email is hacked and you use the email on one of the crypto exchanges, it is no longer safe for you, contact your exchange, and change to another email.

It can be dangerous for you Bitcoin or crypto that you are trading could be lost.
If your exchange requires a VPN, don't use a free VPN, use a prepaid VPN, if asked, if not, don't use VPN.

[witcher_sense]

It looks like you have fallen a victim to a so-called SIM swap attack. An attacker somehow got access to your phone number, your identity and, by employing means of social engineering, managed to persuade mobile phone service employees to clone your SIM-card. Having done all this, he then got access to your email, your accounts, and other stuff connected to your email. What you should do is change your phone number, mobile phone service provider. Your seed phrase is safe unless you are keeping it online or use SMS-messages as a second factor to protect your seed.

[Genemind]

It would be best if you avoid using your phone or computer if it has been compromised. Do not attempt to open your ledger using this device or else your funds will be swiped. That is also one of the reasons why I don't open unsolicited  emails or even spams on my email, never click any links to avoid this kind of risk.

[Lorence.xD]

It would be best if you avoid using your phone or computer if it has been compromised. Do not attempt to open your ledger using this device or else your funds will be swiped. That is also one of the reasons why I don't open unsolicited  emails or even spams on my email, never click any links to avoid this kind of risk.

The best way is to reset the phone to factory setting. The problem with unsolicited emails is that they are getting trickier when it comes to phishing for details, the only way to not get phished is to check the email of the sender because if it is a pretentious customer support or something in the league, you can tell it at first glance. In opening unsolicited emails, the only risk is the links that they send but not the email itself. And abandon your email because it will be circulating in scammer forums.

To OP, if you have the phrase at your phone then your bitcoin is doomed, that is for sure.

[irixo10]

Hi there tonight i found out my email was hacked and the password changed. i also watched in real time as the hacker went to my binance and bittrex accounts and changed the passwords and then logged into them. He also hacked into other crypto related websites i deal with. Thank God i had no crypto on either of these exchanges so the thief wasnt able to take anything. i have a feeling this information for them to use against was because of the ledger data leak, i was one the people who's data was breached. So i have a question if they can do all this what if they get on my ledger live. Is my bitcoin safe? i understand that they need the 24 word phrase seed to enter it but all this has left me unsure. I did manage to get an ip address from this guy but i know they can fake that kind of stuff so i dont know. What do you guys think i should do plz help thanks.

If you can, then try getting a new computer system or borrow from a trusted person to access your wallet, because you do not know where the hacker was able to get hold of you, so it is wise to keep off from your computer now for. Also, if possible you can try formatting your computer to get rid of any sort of threats and phone if possible reset it as well, at least with this you will be sure you are freed from them. On the case of the exchanges, if your account on the exchanges are verified already then you can contact them to change your email, but if they are not, then abandon the email and create a new exchange account. Henceforth, be careful of the websites you visit, and always bookmark the ones you use frequently. Also, as for your Bitcoin wallet, always make sure the security measures that is, private keys or 24 word phrases is not stored on your phone or computer, always keep them offline, such that, even if your devices are compromised your wallet won't be accessed.

[Awalt541]

Please double scan your computer to make sure you didn't download or compromise file or software  to stole your data.
If you save on exchanger like you said binance or bittrex as long their have control on it and you forgot to set up 2fa. yes you'll lost them.
If their has live ledger, you must keep secure your phrasa. as long they didnt get your phrasa they have no control into in, and your bitcoin will be safe.

 

[LogitechMouse]

You didn't say all of what you did in your computer. You might fell into the tricks that scammers are usually doing.

Best thing to do right now is to just transfer your Bitcoin into a more safer wallet. I will not recommend any wallet since even the HW wallet Ledger can get breached by these hackers already. Transfer your Bitcoins to a more safer wallet. Change everything that you are using that is related to crypto as fast as possible because anytime your Bitcoins might lost in your hand.

[witcher_sense]

You didn't say all of what you did in your computer. You might fell into the tricks that scammers are usually doing.

Best thing to do right now is to just transfer your Bitcoin into a more safer wallet. I will not recommend any wallet since even the HW wallet Ledger can get breached by these hackers already. Transfer your Bitcoins to a more safer wallet. Change everything that you are using that is related to crypto as fast as possible because anytime your Bitcoins might lost in your hand.

The fact that hackers still haven't stolen his bitcoin clearly tells us that the seed phrase wasn't exposed. It may very well be they are waiting for the moment of transferring funds. It is still unknown how hackers got access to data, whether the computer is infected or not is also unclear. It is possible that the wallet itself is infected, which means any attempts to transfer funds can lead to dire consequences. In my opinion, we first need to figure out what actually had happened and only then give advice regarding what steps should be taken to protect funds.

HW wallet Ledger can get breached by these hackers already.  

I doubt it, hackers would need physical access to the hardware wallet to compromise it.

[Lorokan]

Hi there tonight i found out my email was hacked and the password changed. i also watched in real time as the hacker went to my binance and bittrex accounts and changed the passwords and then logged into them. He also hacked into other crypto related websites i deal with. Thank God i had no crypto on either of these exchanges so the thief wasnt able to take anything. i have a feeling this information for them to use against was because of the ledger data leak, i was one the people who's data was breached. So i have a question if they can do all this what if they get on my ledger live. Is my bitcoin safe? i understand that they need the 24 word phrase seed to enter it but all this has left me unsure. I did manage to get an ip address from this guy but i know they can fake that kind of stuff so i dont know. What do you guys think i should do plz help thanks.

When situations as this happen; the first thing to do is open another wallet; then withdraw all your funds. After doing this you can then start to figure out how you were breached and how your email was accessed. It is not safe to store private keys in your email. If you insist on storing on your email then you have to set up 2fa on your phone for proper security.

[Charles-Tim]

...

About your exchanges that was hacked and got access into, you should have used 2fa. And while using 2fa, it is good to have another device for it generateing the authentication code, if another phone is used for it, and you enable the 2fa on the exchange you used, the hacker would have just tried but in vain to access your exchange account. You will need to report this to exchange customer care and also you will need to enable the 2fa.

Is my bitcoin safe? i understand that they need the 24 word phrase seed to enter it but all this has left me unsure. I did manage to get an ip address from this guy but i know they can fake that kind of stuff so i dont know. What do you guys think i should do plz help thanks.

It depends. I will like to explain this for you clearly. During the data breach, ledger owner emails, phone number and physical address we're leaked to millions of people to be able to access. After the incident, hackers have been sending malacious messages to ledger wallet owners, clicking on the message through email or text messages can caused your ledger wallet to be compromised by providing what is required to steal your bitcoin and other cryptocurrencies on the phishing links. But if you do not click on these phishing links you are safe.

Secondly, is the use of physical threats to threaten ledger owners, but no physical attempts have been made and reported, but there have been series of phisical threats through messages where attackers said they will visit the ledger owner home.

[Fundamentals Of]

If your Bitcoin is stored in your hardware device then your Bitcoin is safe. What is compromised is your email. You need to change the password of that email or junk that email altogether. Your exchange accounts should also have a new email address. If it is possible, change your phone as well as your phone number. Install 2FA on your exchange accounts. If possible you should also reformat your computer.

[cheezcarls]

Hi there tonight i found out my email was hacked and the password changed. i also watched in real time as the hacker went to my binance and bittrex accounts and changed the passwords and then logged into them. He also hacked into other crypto related websites i deal with. Thank God i had no crypto on either of these exchanges so the thief wasnt able to take anything. i have a feeling this information for them to use against was because of the ledger data leak, i was one the people who's data was breached. So i have a question if they can do all this what if they get on my ledger live. Is my bitcoin safe? i understand that they need the 24 word phrase seed to enter it but all this has left me unsure. I did manage to get an ip address from this guy but i know they can fake that kind of stuff so i dont know. What do you guys think i should do plz help thanks.

Are you using Gmail for these accounts? If yes, you should have enabled 2FA so that the hacker has difficulties in accessing your account, changing your password, etc. I had a Ledger Nano S but I bought it directly from my friend for $100 and didn’t order online. As long you did not store the 24 word seed phrase in your emails or anywhere online, you are good. I usually write them down on my notebook.

This is the advantage of non-custodial wallets where you can only recover the account with a 12 to 24 word seed phrase that you hold and not storing them online. Your Bitcoin and other assets there are safe, unless you are carelessly revealing them in public or storing them online that the hacker could easily compromise it.

[Wexnident]

As long as your ledger seeds weren't connected in the pc, I think it's pretty safe? Never used one so I'm not sure, but seeing as the exchange accounts that got hacked had nothing, and the only thread here really is them accessing your ledger, I think you're safe. Although I do advise informing Ledger that your email got hacked, inform them somehow about it so that they can be alerted to anyone using social engineering on them to access your seeds ( if there ever is one). It'd be a lot better if you completely change your emails, but if you don't prefer to, just attach 2FA and add security questions and the like.

[cryptomaniac_xxx]

Your bitcoin is still safe in your hardware wallet, Ledger, unless they do a "5 dollar wrench" attack. Probably this is connected to this kind of attack.

But to be on the safe side, you should wipe out your pc as it might have been compromise already. Don't do any crypto related activities on that pc anymore. For your exchange account, enable 2FA.

[DdmrDdmr]

<…>

The email you are talking about is very likely a phishing email. The so called "cancel button" likely points to a Google Doc. Pressing that link alone should not have compromised anything, but the link likely takes you to a fake Ledger site, that eventually asks for your 24 word mnemonic to resolve the pretext (withdraw delay).

Providing you did not provide the 24 word mnemonic, and that you did not have it stored in your email or such (google drive, etc.), your bitcoins should be safely on your Ledger device. It’s normally when you panic that you start doing rash things that lead to you risking tour bitcoins.

You have not mentioned if your phone was used to provide 2FA to the accounts, nor whether you still have full control over it (make sure you can call/receive calls through your carrier). Can’t tell therefore if you’ve been sim swapped.

You can check if your data is in the Ledger breach yourself, as links to the data are provided here and there (on this forum too, in what I consider an unfortunate move that propagates the effect even further).  

[Zemomtum]

Phishing can deceive an unsuspecting user, what you need to do next time you receive an unsolicited email is to hover your mouse on the sender name, it will reveal the domain extension and you will realize it is not from a trusted user. If you enabled 2FA on your account using Google authenticator or Authy, the hacker will try without any success since it is your mobile that was hacked/cloned and not that you lost your phone. Do not access your ledger with that device until a full reset is performed. If you already completed KYC on those exchanges, you can change your email by contacting customer support, PLEASE, don't use that email going forward, create another one and protect it jealously.

[bunglor]

if they successfully login to your exchanges like bittrex and it happens that you have money that was stored there then your money is in danger for sure as they can easily transfer or withdraw your money to their wallet especially if your account didn't have a strong security like 2FA enabled and etc.