[Resolved][Severity: Critical][Intrusion]

BtcBox: its web server was accessed without authorization, scam emails posing as the exchange were sent to customers, and ID verification images may have been stolen

Unauthorized access to a web server led to scam emails to customers, and ID verification images stored on it may have been stolen.

Disclosed

2021-04-15

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2021-04-06 03:00
Shortly after 3:00, scam emails posing as the company were sent to customers from the hacked web server through an outside email delivery system the company uses. [1]

Impact and response

Besides the email addresses that were misused, identity verification image data stored on the server may have been stolen. The company said customers' deposited assets and personal information other than the verification images were not affected. [1]

The company tightened access restrictions on the web server, notified the Financial Services Agency and others, and investigated with the help of outside specialists. [1]