[SOLVED] Betnomi | Project status & Refund Plan!

[yahoo62278]

Would you consider selling me your all operations/platforms/database in exchange for refunding all of your users?

with an ESCROW of course.

No, no, selling users' databases, is a big red flag and should not be considered.
When registering, Betnomy users certainly did not consent to the trading of their data. It's like that on all online services.

While it is a red flag, some sites prob could care less if they are exiting the market. Unless someone was on the inside whistleblowing, noone would know really except the buyer and seller. I don't think that's on the table in this case, I am assuming Betnomi is trying to make users whole again and rebuild. Only time will tell at this point.

[1715268936]

1715268936

[1715268936]

1715268936

[agentF]

Would you consider selling me your all operations/platforms/database in exchange for refunding all of your users?

with an ESCROW of course.

No, no, selling users' databases, is a big red flag and should not be considered.
When registering, Betnomy users certainly did not consent to the trading of their data. It's like that on all online services.

\

Sorry, I didn't want to take DB. I wanted to buy the whole operation and refund the users.

I don't need the DB.

[Mahdirakib]

And two, how will you confirm the required submission entries you propose[2], if you don't have that very database to match them up?

Sorsis is making the stories with a lot of mistakes and telling lies to hide the lies. He has included a few many conditions for the users to be eligible for the refund. They won't be able to verify those conditions without having the full database of Betnomi. They don't have the complete database as it was sold by them to a third party.

While it is a red flag, some sites prob could care less if they are exiting the market. Unless someone was on the inside whistleblowing, noone would know really except the buyer and seller. I don't think that's on the table in this case, I am assuming Betnomi is trying to make users whole again and rebuild. Only time will tell at this point.

They are trying to get another chance to scam the people again. Betnomi has nothing left to rebuild it's reputation and trust from the users. OP (Sorsis) has already mentioned in the main post that the 'database was compromised and potentially sold'. And Betnomi's users have an idea about this since last 4 months.

Betnomi website is still in maintenance and not working, but something strange happened today with unique email I used for registering on Betnomi website.
I received spam email from someone called CryptoBonuses and it was redirecting to website Crashout, that all looks a lot like scam.
Maybe Betnomi data was hacked or something else happened, but this is first time I heard about this websites.

[wallet4bitcoin]

It is nice to see that Betnomi is coming back to refund their users money.

Therefore, we have decided to permanently cease operations and stop using the Betnomi brand in our best interests.

What if all users have been refunded and you build back good reputation, are you coming back or no Betnomi again?

We'd be looking forward to seeing when you will refund all customers back their money.

To a large extent, I believe they will get to build reputation to greater heights if they successfully refund everyone and if they can refund 100% of all their investor's fund.  But if it goes otherwise, they should expect nothing less of zero reputation.

Refunding totally invested funds might build reputation enough to get same investors on board their next brand as they believe you have their best interest at heart.

[Oilacris]

-snip-

A long time ago.

People who are asking on their telegram, they deleted the message + kicked the person. My account is also getting banned because asking these on their telegram, not everyone is a forum geeks.

They don't have access to the site (to change MT into refund information) + people getting kicked. So, the people who are getting kick from their group will not receive any update (they're have higher chance not gonna get the refund due don't get any information at all).

If thats the case then it is really that indeed shady and something that do talks about obvious shady and it did really end up on being a scam.
Did hover into OP's current feedback rating and i do see on latest which is on Efialtis.

https://www.btcgosu.com/blog/news/betnomi-exit-scam-users-left-in-limbo-as-crypto-gambling-operator-shuts-down/

Very detailed information on how Betnomi did really become on this current situation. Just as expected for Btcgosu
on which information are really that indeed precise and concise. Good thing now that they are really that making that refund
on which it is something ethical that they should do after a long time silence.

[ryzaadit]

-snip-

By how their handle the case

Do you think, people are gonna to use it anymore? IMO, they will back to the industry but using a different brand name. Everyone know right now, while they're facing some problem they tried to hide it on the public.

These is not gonna to be a big deal, If they not leaving user without information, silence and ignore any discussion about the case.

[Poika5]

We have since learned that our database was compromised and potentially sold to another casino platform that falsely claimed Betnomi had rebranded.

Whoever bought your database has access to all the information required for a successful refund.
So what's stopping them from creating 100 fake refunds if they have all the client data? Username, email, balance.

Betnomi Refund Plan

Code:

1. First name, Last name (if you are KYC verified)
2. Username (request will be ignored if the username does not exist)
3. Email address (request will be ignored if the email does not match)
4. Refund Amount (approximate balance is acceptable)
5. Wallet address (we will process only in the cryptocurrency you have)

This whole thing has more holes than Swiss cheese.

[Taskford]

-snip-

By how their handle the case

Do you think, people are gonna to use it anymore? IMO, they will back to the industry but using a different brand name. Everyone know right now, while they're facing some problem they tried to hide it on the public.

These is not gonna to be a big deal, If they not leaving user without information, silence and ignore any discussion about the case.

For sure there are doubts to use their new casino but if they show some great changes especially with the people working it also in support side maybe it can change the doubts to trust. For now they should be true to their words about the refund since this is what people looking forward to them. If they can do it in short period of time without any delays and all of affected users will get their money then it maybe a game changer for them.

For now people doesn't care about their newly launching plan but rather they are looking for the refund process to happen. Gaining trust maybe hard for them to gain again so this is a lot of work that need to fix up so they can regain back their reputation from people in this forum/

[examplens]

Sorry, I didn't want to take DB. I wanted to buy the whole operation and refund the users.

I don't need the DB.

I guess that wasn't the intention, although it looked that way.
If you take my advice, I would tell you to avoid this deal anyway. Betnomi as a casino has been inactive for some time, which certainly cancels most of what they did on their promotion. Add to that the negative reputation they have at the moment, they do not represent a desirable investment.

Also, keep in mind that (at least according to Sorsis) part of the team left and pretty much compromised the whole business. As a potential new manager, you may not get the most accurate insight into all the problems and potential shortcomings.

[betnomi]

@Mahdirakib, it is okay to be wrong sometimes. You don't always have to be right.

You have persistently made unfounded claims that went unchallenged. Our goal is not to mindlessly argue about trivial things. We have a complicated and delicate situation on our hands, and we are doing our best to resolve it. If you have constructive criticism or something useful to contribute, we welcome it. However, personal attacks and name-calling are unproductive.

As for questions regarding the database, let me clarify those.

We use AWS RDS cross-region with a disaster recovery plan in place. Also, we had a secondary ClickHouse database that operated as our data warehouse. It is not that we had a single instance database and lost it overnight. That is not possible with the sophisticated system architecture we had in place, and the production database access was limited to a single developer and myself with root access.

When we suspended our operations, we had to terminate some of our AWS resources because these services cost several thousands of dollars in monthly expenses. It doesn't make sense to keep them running when they are not being utilized.

At this point, we made the decision for the developer with the production database to take a backup and the DevOps engineer to terminate the services. This was the timeframe in which relationships went sour, etc. From this point, I no longer had access to any system or services. There was no technological or inappropriate handling of data in this case. It was purely a human factor. It can and does happen with many organizations. It is not a crime to trust people you work with.

The limited backup we have; the Curacao regulators require you to upload specific information to them once a week. This includes user ID, username, email, balance, last login date, IP, transactions, etc. They need to keep a copy on their own servers to be able to verify reports made by users against our claims. This is a must for every casino operator licensed with them.

Of course, we complied with this process, however, there was some information we deemed unnecessary and sensitive enough where the risk of sharing it outweighed the benefits. Such information would include the users' email addresses. We thought it was important that we protect our users' email addresses from third-party systems, not only with the Curacao regulator but even slots aggregators and sports providers.

We only share usernames and user IDs for identification and never email addresses. They are private and should be protected to the degree that is possible.

Whatever we have now is what we uploaded to the Curacao regulators. It has everything we need to be able to verify the information needed for the refund except for the email addresses. However, we have encrypted email logs from a promotion we ran sometime ago. We have our own ways to manually encrypt the submitted emails and run them against the logs to verify them. We can't send mass emails because they are encrypted, and no, before you ask, it is a one-way encryption.

[dimonstration]

For sure there are doubts to use their new casino but if they show some great changes especially with the people working it also in support side maybe it can change the doubts to trust. For now they should be true to their words about the refund since this is what people looking forward to them. If they can do it in short period of time without any delays and all of affected users will get their money then it maybe a game changer for them.

For now people doesn't care about their newly launching plan but rather they are looking for the refund process to happen. Gaining trust maybe hard for them to gain again so this is a lot of work that need to fix up so they can regain back their reputation from people in this forum/

Actually, Betnomi casino is just fine before they shut down. The only issue with their reputation now is only the shutdown while there's still players balance trap in there. Aside from that, there's no known scam accusation against them regarding their service in general. Their reputation can be easily fixed once they refund all the users funds and probably compensate them due to the long term of funds holding.

They are much better unlike other casino here that still active while there's bunch of scam accusation against them. At least on Betnomi, we might understand how this happened due to internal conflict and not that they want to cheat to customer using their service.

[piebeyb]

For now people doesn't care about their newly launching plan but rather they are looking for the refund process to happen. Gaining trust maybe hard for them to gain again so this is a lot of work that need to fix up so they can regain back their reputation from people in this forum/

Yes as I said before, it seems like everyone will focus on the refund issue so after everyone has got their money, then they will talk about their new project and how they can gain trust again in this forum even though it will definitely be very difficult, but Lately there have also been casino sites that use betnomi templates and icons but I'm not accusing them of having released a replacement site, I'll have to put that aside at least until everyone gets their money back.

There's definitely a lot that needs to be fixed to process all refunds, whether it's true or not everyone will definitely be waiting for the latest news from the OP in this thread at least it can make Betnomi users who have funds previously there can be returned immediately, I know this is difficult but I'll be even more curious with their progress through this thread.

[holydarkness]

[...] IMO, they will back to the industry but using a different brand name. [...]

That's their intention,

[...] Therefore, we have decided to permanently cease operations and stop using the Betnomi brand in our best interests.

Over the past two years, we have developed our own casino software, risk management engine, and other valuable intellectual property worth millions of dollars. We intend to leverage this expertise to rebuild a stronger brand in the future.
[...]

[...] From this point, I no longer had access to any system or services. [...]

Whatever we have now is what we uploaded to the Curacao regulators. It has everything we need to be able to verify the information needed for the refund except for the email addresses. However, we have encrypted email logs from a promotion we ran sometime ago. We have our own ways to manually encrypt the submitted emails and run them against the logs to verify them. We can't send mass emails because they are encrypted, and no, before you ask, it is a one-way encryption.

Ok, so basically, as what you have right now is what you uploaded to Curacao regulators [except for the email because you deemed it very private] and it's what'll be used to verify the information needed for refund, wasn't it imply you uploaded the first and last name of your users?

You didn't have access to the email addresses because you did not upload them to Curacao regulators, because it's very sensitive and needs to be protected with the degree that is possible, but something that's far more sensitive and literally zeroing into the specific person, their KYC data, you're fine with it being uploaded to the regulators?

I am not saying email address is not private. I am saying there's something more private that needs to be protected. One can make an email address that barely reflect to their identity, but a first and last name and KYC details, one can't fake that. To explain further suppose my first name is Santa and my last name is Claus, there's no one that can prevent me from creating an email address named thebunnyrabbitofeastersucks@anemail.com, this email address barely gave any clue and privacy risk of me, Santa Claus. That one you protect with the highest degree possible, but my ID is free to be shared?

I don't understand. I believe I understand something wrongly?

[betnomi]

@holydarkness, you have a point, and certainly an interesting one.

But to answer your question, we do not upload nor store KYC data on our servers. We do not view or do anything with the information directly.
Rather, we use a third-party service called Veriff. This is an identity verification service designed for just that. They are specialized in that field. Their systems are designed with data protection and verification at their core.
They are licensed in several jurisdictions, including the EU, and comply with all data protection standards, including CCPA/CPRA, GDPR, SOC2 type II, ISO 27001, and WCAG. In short, it's one of the safest places to keep such data, and a lot of major organizations use them as well.

Additionally, if the regulator mandates the upload of first and last name, you must comply with this requirement. We do not willy-nilly determine which information to upload. Some information is mandatory, while others are not. If it is not mandatory and we deem it worth protecting, we will take appropriate measures to safeguard it.

I can testify that I havent received this but Betnomi did pmed me before about this. I didnt even know at that time that I was one of the recipient

Betnomi actually pmed me like a day or two after the whole site got shutted down asking for my delivery address so I was actually worried if their account was compromised at that time then I replied them with asking them to sort the their site's issue before sending me those ledger because it wasnt that trivial compared to the chaos back then

If you have a few minutes, please contact this user and tell him your delivery details and he will send you your prize (you can quote me).

He still has 1 or more Ledgers in storage.

Btw, another user did an independent review of these wallets if you are interested.

After my earlier post, being also inspired by pixie85's post and by icopress' suggestion, I decided to check the hardware integrity of the Ledger I received from Betnomi.

In theory, on their website the required steps look simple, yet the practice is the one which always kills us. All I found there was this:

Secure Element attestation

The Secure Element itself is personalized at factory with an attestation proving that it has been manufactured by Ledger. You can verify it by running

pip install --no-cache-dir ledgerblue

python -m ledgerblue.checkGenuineRemote --targetId 0x33000004

Obviously, those were not commands which could be simply typed in a Command Prompt window. So after some digging I understood that I have first to install Python. You can get Python from here: https://www.python.org/downloads. Alternatively, you can also download it from Microsoft store. I downloaded Python 3.11.4.

Following some articles I found on the Internet, I understood that Visual Studio 2017 build tools may also be needed on Windows. As I wanted to make sure I have all prerequisites, I also installed this software (so I don't know if everything works without it). Visual Studio 2017 build tools can be downloaded from here: https://www.visualstudio.com/downloads/#build-tools-for-visual-studio-2017.

If you want to make sure you installed Python properly, you can run this command (directly in a Command Prompt window -- so just press Start - Run - cmd or press Windows key + R): python --version. You should see something like this:



Then you'll need to install pip, which is a Python package manager, which may come or not together with your Python build. Following some tutorials about Python, I reached this page and from here you can download pip. You will see in your Download folder a file named get-pip.py.

Afterwards you have to run this command (Command Prompt): python get-pip.py. This will install pip.

Having pip installed, you can ensure about this by typing the following command (in Command Prompt): pip --version.  You should see something like this:



Additionally, you'll need to install a Virtual Environment for Python, in order to be able to run the commands for checking the hardware integrity (I know, it already sounds like a pain in the ass only by reading everything I wrote here but imagine how it feels to actually do all these (!) and find all the information necessary in order to be able to make this check... ). So following the same tutorial page for Python I installed first Pipenv, which allows you to install Python packages, then I installed Virtualenv, which "creates a folder which contains all the necessary executables to use the packages that a Python project would need". In order to install these, you need to run these commands (in Command Prompt): pip install --user pipenv and pip install virtualenv.

Next step is to install Python tools for Ledger Blue, Nano S and Nano X, which can be found here. In order to be able to do this you need to run the following commands (in Command Prompt): python3 -m venv ledger and pip install ledgerblue.

After finishing all these we finally get back to the command shown on Ledger website: python -m ledgerblue.checkGenuineRemote --targetId 0x33000004 -- but we do not run the command yet (keep reading below). The part "0x33000004" is the TargetID, meaning a code of your product. The entire list of TargetIDs is available on the website I mentioned above (obviously, none of these can be found directly on Ledger's website so you need deep Internet search for obtaining all this information):

Device name	Firmware Version	TargetID
Nano S Plus	all	0x33100004
Nano X	< 2.2.1 (developer units only)	0x33000004
Nano X	>= 2.2.1	0x33000004
Nano S	<= 1.3.1	0x31100002
Nano S	1.4.x	0x31100003
Nano S	>= 1.5.x	0x31100004
Ledger Blue	<= 2.0	0x31000002
Ledger Blue	2.1.x	0x31000004
Ledger Blue v2	2.1.x	0x31010004

As I wrote above, the command should not be entered yet. This is because the Ledgers from Betnomi have an old firmware (2.0.1) and the command works with newer firmware versions. So at this point you need to perform a firmware update (if you haven't already), which can be done through the Ledger Live app. For those not aware (there may be still a few of them), Ledger Live app can be downloaded from Ledger website: https://www.ledger.com/ledger-live. After installation is done select the tab My Ledger. There will be two firmware updates available. First one will upgrade the Ledger's firmware from 2.0.1 to 2.2.1. Second upgrade will bring the firmware 2.2.2 to your Ledger. However, the command for checking the hardware integrity can be run after having the firmware 2.2.1. You should see something like this:



Reaching this point, you must have the Ledger connected to your PC / laptop and also make sure it is not in standby. For obvious reasons, the command won't do anything if the wallet is not connected to the PC. And, if it is in standby mode you'll get a long error message, ending with Connection to remote host was lost. However, assuming that the device is connected and it is not in standby mode, run the command python -m ledgerblue.checkGenuineRemote --targetId 0x33000004. You will receive a warning on your Ledger screen, which you need to confirm.

And finaaaaaaaaaaally, after all these, I received this confirmation:



It was a lot of work but, at least, I was assured that the Ledgers from Betnomi are genuine. Or, at least, I was  50% assured. To ensure the remaining 50% I proceeded to open the device, in order to check its PCB.


Warning: performing the steps mentioned below may destroy your device. If you won't destroy it then you'll certainly lose the warranty.

This part may also sound simple, but it's not simple at all. You need to pay a lot of attention, as the product looks like a capsule (obviously, it was not meant to be opened) and it has no screw. Trying to break its case open may break it so your device may be totally damaged. However, since I won 3 such Ledgers from Betnomi I afforded the risks.

So first step is to remove the grey part branded with Betnomi from the wallet. The grey part should be lifted (in a delicate manner) from the grey button of the wallet. It can be removed relatively easy.



Now the important part comes. You need a very thin screwdriver or a very thin knife or any other sharp thing which is also very thin. If you look around the display, you'll see a very thin line -- this is the line where the part of the case protecting the display is assembled with the rest of the product. The screw driver should be used for forcing it into this thin line, in order to detach this part of the case from the other part of it. This should be done with a lot of attention, as at this step the device may become broken. In order to avoid this you may try to push the screwdriver between the part with the display and the rest of the wallet case on multiple spots of this thin line, thus getting some more weak spots which, in the end, will make the detaching of the display more easy.

By pure chance, I had a minuscule screwdriver and I used it for the surgery operation:





Then I used the grey part, which I previously removed, and I inserted it in the small opening made by the screwdriver, to keep that part open. Having a part already open, I used the screwdriver to force the opening more:



I proceeded with caution for the rest of the thin line until the case fully opened.

At this point I had to pay a lot of attention, as the navigation buttons are not attached to the PCB, nor to the external side of the case. They are not attached to anything and only the fact that they enter in the holes of the case keeps them at place. So I took them out, hoping to remember the correct place of each one.



The display is on the other side of the PCB (as seen in the image from above) and it is connected to the PCB through a small interface, so you can manipulate it to a side, since it is not attached on the PCB. This is important, because by moving it to a side you can check the entire side of the PCB where it is placed.

In the end, I could take these pictures of both sides of the PCB:



Next step was to compare the PCB details with the images shown on Ledger's website. There are 4 hardware revisions of these Ledgers, having different PCB colors. The PCB of my device is green, which corresponds to Revision 4. And, by analyzing the look of my PCB and the one from Ledger website, it seems the PCBs are identical:



Now I was finally assured that my product respects the hardware integrity!

Since I am a magician when it comes to opening electronic devices piece by piece then placing all the pieces back together By pure chance I also managed to place back everything inside the wallet case then close back the case. Surprisingly, the wallet is still functional!


In the end, for trying to be more catholic than Pope is, I performed also the genuine check offered by Ledger Live app:









The check concluded by saying that the product is genuine. Hooray!


Conclusion

Having these said, I guess that the owners of Betnomi Ledgers can relax now, as their products are not tampered with. Those which want though can perform the above steps for checking their wallets' hardware integrity on their own. However, I don't recommend this, unless you don't care if the device gets fully damaged or unless you are used to opening electronic devices / fix them / etc.

It is very sad that icopress is having a huge loss because of Betnomi but, at least, they were not that evil to tamper the devices they raffled on the forum.

[Mahdirakib]

In June, we faced significant internal challenges related to the company's long-term financial outlook and ownership structure. To address these issues, we temporarily suspended operations and initiated a restructuring process with a focus on long-term profitability. During this time, it became clear that continuing to work with the existing owners was no longer viable, and we terminated the partnership.

the production database access was limited to a single developer and myself with root access.
~snip~
At this point, we made the decision for the developer with the production database to take a backup and the DevOps engineer to terminate the services. This was the timeframe in which relationships went sour, etc. From this point, I no longer had access to any system or services. There was no technological or inappropriate handling of data in this case. It was purely a human factor. It can and does happen with many organizations. It is not a crime to trust people you work with.

Based on your initial statement, there were more owners of Betnomi beside you. And you had terminated the partnership with other owners to run it alone in a profitable way. You were blaming the other owners for the database leak (actually sold). But today you have said that, there was only one developer who had access to the production database except you. So, the 'existing owners' was a misleading part in your main post. Therefore, users database was either sold by you or the single developer. You are addressing users email address as private information, but it was sold to unknown authority for your irresponsibility. Because, you wanted to save money for ....

There are a lot of "why", but give the answer of these two questions for now
• Why were you deleting the messages from telegram group and banning those users who were asking about the issues?
• Why had you added those users to your 'distrusts list' who left negative feedback on your profile?

Don't blame other people (owners/partners/developer) for these again.

[GekkeBelg]

We have since learned that our database was compromised and potentially sold to another casino platform that falsely claimed Betnomi had rebranded.

Whoever bought your database has access to all the information required for a successful refund.
So what's stopping them from creating 100 fake refunds if they have all the client data? Username, email, balance.

Betnomi Refund Plan

Code:

1. First name, Last name (if you are KYC verified)
2. Username (request will be ignored if the username does not exist)
3. Email address (request will be ignored if the email does not match)
4. Refund Amount (approximate balance is acceptable)
5. Wallet address (we will process only in the cryptocurrency you have)

This whole thing has more holes than Swiss cheese.

If someone has their database, they do not have access to the email of the users yet.

The refund email still has to be sent from the registered emailaddress and ofcourse only the user himself can do this.

[Poika5]

We have since learned that our database was compromised and potentially sold to another casino platform that falsely claimed Betnomi had rebranded.

Whoever bought your database has access to all the information required for a successful refund.
So what's stopping them from creating 100 fake refunds if they have all the client data? Username, email, balance.

Betnomi Refund Plan

Code:

1. First name, Last name (if you are KYC verified)
2. Username (request will be ignored if the username does not exist)
3. Email address (request will be ignored if the email does not match)
4. Refund Amount (approximate balance is acceptable)
5. Wallet address (we will process only in the cryptocurrency you have)

This whole thing has more holes than Swiss cheese.

If someone has their database, they do not have access to the email of the users yet.

The refund email still has to be sent from the registered emailaddress and ofcourse only the user himself can do this.

But how hard is it to spoof an email address?

[GekkeBelg]

We have since learned that our database was compromised and potentially sold to another casino platform that falsely claimed Betnomi had rebranded.

Whoever bought your database has access to all the information required for a successful refund.
So what's stopping them from creating 100 fake refunds if they have all the client data? Username, email, balance.

Betnomi Refund Plan

Code:

1. First name, Last name (if you are KYC verified)
2. Username (request will be ignored if the username does not exist)
3. Email address (request will be ignored if the email does not match)
4. Refund Amount (approximate balance is acceptable)
5. Wallet address (we will process only in the cryptocurrency you have)

This whole thing has more holes than Swiss cheese.

If someone has their database, they do not have access to the email of the users yet.

The refund email still has to be sent from the registered emailaddress and ofcourse only the user himself can do this.

But how hard is it to spoof an email address?

I have no idea, pretty hard still I think. But even if they manage it, if there are 2 emails sent claiming the funds, then ofcourse Betnomi should investigate.

[BitcoinGirl.Club]

Regarding the suggestion to send an email to users, this is clearly the most effective way to resolve this issue. However, as we mentioned in our initial statement, we do not have access to the database. We do have a limited version of the database that is shared with regulators for compliance purposes. If we had access to the actual site database, we would simply restore the site and allow users to withdraw their funds directly. Unfortunately, this is not the case, and we can only do what we can with the resources available to us.

What is stopping you to send the email to the users existed with the version of database you have right now? Just a simple email blast, follow a few more to ensure everyone read the email. I will be checking my email.

Code:

2. Username (request will be ignored if the username does not exist)
3. Email address (request will be ignored if the email does not match)

Sounds like it's the users fault!

[holydarkness]

@holydarkness, you have a point, and certainly an interesting one.

But to answer your question, we do not upload nor store KYC data on our servers. We do not view or do anything with the information directly.
Rather, we use a third-party service called Veriff. [...]

Which you no longer has access, according to your own statement, or were you trying to say Veriff is an exception and you still have access to the service they offered?

[...] From this point, I no longer had access to any system or services. [...]

What is stopping you to send the email to the users existed with the version of database you have right now? Just a simple email blast, follow a few more to ensure everyone read the email. I will be checking my email.

Because for some reason, they can't decrypt it... apparently.

We can't send mass emails because they are encrypted, and no, before you ask, it is a one-way encryption.