The post Crypto.com Reveals Hidden User Data Breach appeared on BitcoinEthereumNews.com. According to a Bloomberg investigation, Crypto.com, one of the world’s largest cryptocurrency exchanges, reportedly suffered a security breach it never disclosed. The report linked the incident to Scattered Spider, a hacking group that often targets companies with social engineering tactics. The group comprises mainly teenagers who specialize in tricking employees into handing over their credentials. Sponsored Sponsored According to Bloomberg, the attackers posed as IT staff and persuaded unnamed Crypto.com employees to surrender login credentials. Once inside, they attempted to escalate their access by targeting senior staff accounts. Crypto.com told Bloomberg that the attack affected only “a very small number of individuals” and emphasized that customer funds remained untouched. The firm has yet to provide additional information about the incident as of press time. Meanwhile, security experts argue that the exchange’s decision not to disclose the breach undermines confidence in its security practices. They argue that its failure to share details about the incident leaves its users uncertain about the extent of the exposure and vulnerable to possible follow-up attacks. This concern is significant because Coinbase previously suffered a similar breach that exposed its customers to more than $300 million yearly losses. On-chain investigator ZachXBT accused Crypto.com of deliberately covering up the breach. He also stressed that this was not the first time the platform had been linked to undisclosed security lapses Sponsored Sponsored His comments echo wider industry frustration about exchanges that quietly downplay breaches to protect their reputations. Meanwhile, the incident has also reignited criticism of the industry’s reliance on Know Your Customer (KYC) systems. Pseudonymous security researcher Pcaversaccio reacted sharply to the issues, arguing that KYC requirements create massive data honeypots for hackers. “You can change a password easily, but _not_ your passport and they f#cking know it well. We’re basically the collateral in their surveillance racket,”… The post Crypto.com Reveals Hidden User Data Breach appeared on BitcoinEthereumNews.com. According to a Bloomberg investigation, Crypto.com, one of the world’s largest cryptocurrency exchanges, reportedly suffered a security breach it never disclosed. The report linked the incident to Scattered Spider, a hacking group that often targets companies with social engineering tactics. The group comprises mainly teenagers who specialize in tricking employees into handing over their credentials. Sponsored Sponsored According to Bloomberg, the attackers posed as IT staff and persuaded unnamed Crypto.com employees to surrender login credentials. Once inside, they attempted to escalate their access by targeting senior staff accounts. Crypto.com told Bloomberg that the attack affected only “a very small number of individuals” and emphasized that customer funds remained untouched. The firm has yet to provide additional information about the incident as of press time. Meanwhile, security experts argue that the exchange’s decision not to disclose the breach undermines confidence in its security practices. They argue that its failure to share details about the incident leaves its users uncertain about the extent of the exposure and vulnerable to possible follow-up attacks. This concern is significant because Coinbase previously suffered a similar breach that exposed its customers to more than $300 million yearly losses. On-chain investigator ZachXBT accused Crypto.com of deliberately covering up the breach. He also stressed that this was not the first time the platform had been linked to undisclosed security lapses Sponsored Sponsored His comments echo wider industry frustration about exchanges that quietly downplay breaches to protect their reputations. Meanwhile, the incident has also reignited criticism of the industry’s reliance on Know Your Customer (KYC) systems. Pseudonymous security researcher Pcaversaccio reacted sharply to the issues, arguing that KYC requirements create massive data honeypots for hackers. “You can change a password easily, but _not_ your passport and they f#cking know it well. We’re basically the collateral in their surveillance racket,”…

Crypto.com Reveals Hidden User Data Breach

2025/09/22 03:09

According to a Bloomberg investigation, Crypto.com, one of the world’s largest cryptocurrency exchanges, reportedly suffered a security breach it never disclosed.

The report linked the incident to Scattered Spider, a hacking group that often targets companies with social engineering tactics. The group comprises mainly teenagers who specialize in tricking employees into handing over their credentials.

Sponsored

Sponsored

According to Bloomberg, the attackers posed as IT staff and persuaded unnamed Crypto.com employees to surrender login credentials. Once inside, they attempted to escalate their access by targeting senior staff accounts.

Crypto.com told Bloomberg that the attack affected only “a very small number of individuals” and emphasized that customer funds remained untouched.

The firm has yet to provide additional information about the incident as of press time.

Meanwhile, security experts argue that the exchange’s decision not to disclose the breach undermines confidence in its security practices.

They argue that its failure to share details about the incident leaves its users uncertain about the extent of the exposure and vulnerable to possible follow-up attacks.

This concern is significant because Coinbase previously suffered a similar breach that exposed its customers to more than $300 million yearly losses.

On-chain investigator ZachXBT accused Crypto.com of deliberately covering up the breach. He also stressed that this was not the first time the platform had been linked to undisclosed security lapses

Sponsored

Sponsored

His comments echo wider industry frustration about exchanges that quietly downplay breaches to protect their reputations.

Meanwhile, the incident has also reignited criticism of the industry’s reliance on Know Your Customer (KYC) systems.

Pseudonymous security researcher Pcaversaccio reacted sharply to the issues, arguing that KYC requirements create massive data honeypots for hackers.

This concern aligns with broader industry skepticism about regulatory frameworks.

Earlier this year, Coinbase CEO Brian Armstrong criticized the Bank Secrecy Act and existing anti-money laundering rules as outdated and ineffective.

He explained that companies are being forced to collect sensitive data against their will. According to him, the requirements do little to prevent crime despite the burden they place on firms and customers.

Source: https://beincrypto.com/crypto-com-hidden-users-data-breach-sparks-criticism/

Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

U.S. Court Finds Pastor Found Guilty in $3M Crypto Scam

U.S. Court Finds Pastor Found Guilty in $3M Crypto Scam

The post U.S. Court Finds Pastor Found Guilty in $3M Crypto Scam appeared on BitcoinEthereumNews.com. Crime 18 September 2025 | 04:05 A Colorado judge has brought closure to one of the state’s most unusual cryptocurrency scandals, declaring INDXcoin to be a fraudulent operation and ordering its founders, Denver pastor Eli Regalado and his wife Kaitlyn, to repay $3.34 million. The ruling, issued by District Court Judge Heidi L. Kutcher, came nearly two years after the couple persuaded hundreds of people to invest in their token, promising safety and abundance through a Christian-branded platform called the Kingdom Wealth Exchange. The scheme ran between June 2022 and April 2023 and drew in more than 300 participants, many of them members of local church networks. Marketing materials portrayed INDXcoin as a low-risk gateway to prosperity, yet the project unraveled almost immediately. The exchange itself collapsed within 24 hours of launch, wiping out investors’ money. Despite this failure—and despite an auditor’s damning review that gave the system a “0 out of 10” for security—the Regalados kept presenting it as a solid opportunity. Colorado regulators argued that the couple’s faith-based appeal was central to the fraud. Securities Commissioner Tung Chan said the Regalados “dressed an old scam in new technology” and used their standing within the Christian community to convince people who had little knowledge of crypto. For him, the case illustrates how modern digital assets can be exploited to replicate classic Ponzi-style tactics under a different name. Court filings revealed where much of the money ended up: luxury goods, vacations, jewelry, a Range Rover, high-end clothing, and even dental procedures. In a video that drew worldwide attention earlier this year, Eli Regalado admitted the funds had been spent, explaining that a portion went to taxes while the remainder was used for a home renovation he claimed was divinely inspired. The judgment not only confirms that INDXcoin qualifies as a…
Share
BitcoinEthereumNews2025/09/18 09:14