Crypto lending provider BlockFi suffered a data breach that put some of its clients in physical danger.
Some of the company’s client data were breached through a SIM card swap attack performed on one of its employees.
The attackers successfully stole the email account and phone number used for the employee's account verification procedure, which allowed them to access BlockFi’s records.
The attackers had full access to customer data used as part of BlockFi’s marketing efforts.
The hackers obtained access to the customers’ full names, email addresses, dates of birth, and notably, activity information and physical addresses.
Home address and activity data may expose the affected users to extortion and physical theft.
Source: https://cointelegraph.com/news/blockfis-data-breach-may-allow-criminals-to-extort-rich-clients
"id": "BLO2214291222",
"linkid": "blockfi",
"type": "Data Leak",
"date": "05/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
Join the conversation