Crypto trading platform Liquid was advising customers to change their passwords and 2FA credentials after being hacked in a domain name hosting attack.
Liquid CEO Mike Kayamori, says a domain name hosting provider inadvertently transferred control of the account to a malicious actor who subsequently changed DNS records and gained access to Liquid's document storage infrastructure.
While client funds remain untouched, the hacker was able to lift emails, names, addresses, and encrypted passwords from the firm's user database.
The company warned customers to be on the alert for evidence of identity fraud and phishing attempts, and recommends that all users change their passwords and 2FA credentials to protect their accounts.
Source: https://www.finextra.com/newsarticle/36968/crypto-trading-platform-liquid-hacked/wholesale
"id": "LIQ72925523",
"linkid": "liquidcrypto",
"type": "Breach",
"date": "11/2020",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"