QUOINE: the domain registration of the Liquid crypto exchange was altered, 169,782 customer records leaked and 28,639 ID documents may have been accessed

1. 2020-11-13 06:00

   Around this time, the company confirmed that the registration details of its account at the US registrar GoDaddy had been altered. From the 13th to the 14th, inquiry mail could have been received by a third party. [1]

2. 2020-11-18

   The company disclosed the damage. [1]

3. 2020-12-23

   To prevent a recurrence, the company moved to an account and domain management provider with more advanced security functions. [3]

4. 2021-01-04

   It moved to a cloud management service with stronger security. [3]

5. 2021-01-20

   The company published its final report. [3]

DNS records were altered and the company's internal mail was taken over. As a result, customer names, mail addresses, encrypted passwords, API keys, and the ID documents, selfies and proof-of-address papers submitted for identity checks may have been accessed. [2]

The company said the cold wallets holding customer crypto assets were not affected. [2]

The final report confirmed the leak of 169,782 records of customer mail addresses, names, encrypted passwords and API keys entered when opening accounts or starting to trade up to November 13, 2020. Of these, 28,639 ID documents, selfies and proof-of-address papers submitted for identity checks up to October 2018 may have been accessed. Mail customers sent to the company between 5:58 on November 13 and 1:39 on November 14 was also affected. No damage to customers' crypto assets or funds has been found. [3]