Transak Data Breach Exposes Personal Info of 92,554 Users

Transak, a Miami-based cryptocurrency payment processor, has reported a significant data breach affecting 92,554 users, approximately 1.14% of its total user base. The breach occurred after an employee's laptop was compromised through a phishing attack, granting unauthorized access to sensitive user information stored with a third-party Know Your Customer (KYC) vendor.

The exposed data includes personal details such as names, dates of birth, driver's licenses, passports, and selfies. However, Transak emphasized that no financial information or passwords were compromised during the incident. The company has initiated an investigation and is notifying affected users via email while assuring others that their data remains secure.

This breach comes amid rising concerns about cybersecurity in the cryptocurrency sector. The Stormous ransomware group has claimed responsibility for the attack, asserting that they have stolen 300 GB of data from Transak's systems. They threatened to leak this information unless their ransom demands are met.

Transak has urged users to remain vigilant and monitor their accounts for any suspicious activity. The incident highlights the ongoing challenges faced by companies in safeguarding sensitive customer information in an increasingly digital world. Data protection authorities in the UK, EU, and US have also been informed of the breach.