
Liquid, a Bitcoin exchange, reported a data breach
The cryptocurrency exchange Liquid disclosed a data breach affecting customer data, which occurred on 13 November.
Update on security incident from 13 November 2020.
Having contained the attack, reasserted control of the domain, and performed a comprehensive review of our infrastructure, we can confirm client funds are accounted for and remain safe and secure. https://t.co/ebbLd6eprB
— Liquid Global Official (@Liquid_Global) November 18, 2020
According to Liquid’s CEO Mike Kayamori, the hosting provider handed control of the exchange’s account and domain to the attacker.
As a result, the attacker was able to alter DNS records and control a number of internal email accounts, and then \”partially compromise\” the infrastructure and gain access to document storage.
The CEO says the team was able to contain the attack in time. Assets and crypto wallets, he says, were not compromised.
The attacker is believed to have gained access to customers’ personal data, including email addresses, names, passwords, and home addresses.
Whether he had access to documents uploaded during the KYC process at Liquid has not yet been determined.
Representatives of the exchange urged all users to change their passwords as soon as possible and enable 2FA.
Earlier this year, Ledger, the manufacturer of hardware wallets,disclosed a data breach affecting millions of users.
Follow ForkLog News on Telegram: ForkLog Feed — the full news feed, ForkLog — the most important news and polls.
Рассылки ForkLog: держите руку на пульсе биткоин-индустрии!