BlockFi, Inc.

The Washington State Office of the Attorney General reported a data breach involving BlockFi, Inc. on June 25, 2020. The breach occurred on May 14, 2020, due to unauthorized access stemming from the porting of an employee's smartphone SIM card, affecting approximately 696 residents. The compromised information included names, email addresses, and dates of birth but did not involve sensitive financial information.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10563

TPRM report: https://www.rankiteo.com/company/blockfi

"id": "blo101072625",
"linkid": "blockfi",
"type": "Breach",
"date": "5/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 696,
                        'industry': 'Financial Services',
                        'name': 'BlockFi, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'SIM Swapping',
 'data_breach': {'number_of_records_exposed': 696,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Medium',
                 'type_of_data_compromised': ['Names',
                                              'Email Addresses',
                                              'Dates of Birth']},
 'date_detected': '2020-05-14',
 'date_publicly_disclosed': '2020-06-25',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving BlockFi, Inc. on June 25, 2020. The '
                'breach occurred on May 14, 2020, due to unauthorized access '
                "stemming from the porting of an employee's smartphone SIM "
                'card, affecting approximately 696 residents. The compromised '
                'information included names, email addresses, and dates of '
                'birth but did not involve sensitive financial information.',
 'impact': {'data_compromised': ['Names', 'Email Addresses', 'Dates of Birth']},
 'initial_access_broker': {'entry_point': 'SIM Card Porting'},
 'post_incident_analysis': {'root_causes': 'SIM Card Porting'},
 'references': [{'date_accessed': '2020-06-25',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'BlockFi Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'SIM Card Porting'}