Chinese journalist Colin Wu reported that in 2021, the Huobi cryptocurrency exchange faced a leak of data on over-the-counter transactions from 2017 to 2021.
The journalist, citing White hacker Aaron Phillips, also said that during the leak, information about users, data on VIP clients, as well as its own technical infrastructure appeared.
The incident occurred on June 22, 2021 due to the negligence of employees in the test environment of the Japanese platform. On October 8 of the same year, the management of the exchange made a decision, after which all information for users was completely isolated.
The incident attracted the attention of "white hackers", and Huobi employees immediately responded to it on June 21, 2023, closing all access to files. The vulnerability was fixed, and all user data was deleted.
However, Huobi representatives then updated the data. They reported that all the details of the transactions mentioned by the hacker were test data, not real data. The leak affected only 4,000 users, and their data was downloaded only by a white hacker. He later deleted this information.
"The exchange previously had a reputation as one of the safest. However, this violation jeopardizes its reputation. I have destroyed all personal information and confidential information related to this breach," the hacker wrote.
In December, cryptocurrency exchange Gemini reported that its customers had encountered phishing. As a result, the attackers gained access to 5,701,649 lines of data, including account numbers, email addresses, as well as phone numbers of Gemini customers.
Representatives of the platform believe that the violation was most likely "the result of an incident with a third-party service provider." However, this data did not include sensitive personal information, such as names, addresses and other information that relates to personal information.