Metamask

ZachXBT

Security

Crypto payment provider Transak has been hacked. A ransomware group has come forward, claiming responsibility for the breach.
On-chain investigator ZachXBT reported the breach, <a href="https://t.me/investigations/169" rel="noopener noreferrer nofollow" target="_blank">saying</a>:
“Looks like the crypto payments provider Transak was recently breached by a ransomware group who claims responsibility.”
The company acknowledged the incident in a blog post, confirming that only a small portion of users (about 1.14%) were affected.
According to Transak, only names and basic identity information were compromised. But the hacker group disputes this, alleging that personal identifiable information (PII) of a larger user base was also taken.
Transak is integrated with popular platforms such as Metamask, Trust Wallet, Coinbase, and Ledger to provide fiat-to-crypto on/off-ramp services.
These integrations mean the effects of the breach could be far-reaching, potentially affecting users across many major crypto ecosystems.
<h3 id="span-style-font-weight-400-transak-s-statement-on-the-hack-span">Transak’s statement on the hack</h3>
In its official <a href="https://transak.com/blog/transak-security-incident-oct-2024" rel="noopener noreferrer nofollow" target="_blank">blog post</a>, Transak says that upon discovering the security incident, they immediately acted to contain the attack and secure their systems. They claimed that no financially sensitive or critical information was accessed in the breach.
The data compromised was limited to names and basic identity details of 1.14% of their users, a number Transak says is a “small portion” of their total user base.
However, the ransomware group’s claim suggests otherwise. They allege that the breach impacted a larger set of users and included more sensitive PII data.
The gap between what the company says and the hacker’s claims has left users in a state of uncertainty. The blog post explains that the breach occurred due to a phishing attack on an employee.
Using stolen credentials, the attacker gained access to a third-party KYC vendor’s system, which Transak uses to scan and verify documents. The attacker was able to log into the vendor’s dashboard and extract user information from there.
Email addresses, passwords, phone numbers, Social Security Numbers, and credit card details remain secure, according to the company. They assured users that their platform operates as a fully non-custodial service.
This means that even though personal information was compromised, user funds (whether fiat or crypto) were never at risk, as the platform does not hold user funds.
It has also begun notifying its partners — like Metamask and Coinbase — about the breach.&nbsp; Transak has informed data protection authorities, including the UK’s Information Commissioner’s Office (ICO), as well as regulators across the EU and US.
The company claims it is still conducting reviews in other regions to ensure compliance with global data protection standards.

Transak was hacked. Attacker takes responsibility

Table of Contents

Cryptopolitan_News

Other articles published on Oct 21, 2024

Activist Investor Starboard Acquires Stake in Band-Aid Maker Kenvue, Shares Jump

Invest in These Top 5 Altcoins for 100x Gains and Aim for a $10 Million Portfolio by 2025

Payments Giant Stripe Acquires Stablecoin Platform Bridge in a $1.1B Deal

CoinSwitch CEO Alleges WazirX With Moving $75M User Funds Post Hack

From digital to disc: Black Myth: Wukong’s physical edition set to hit stores soon

Democratic Party of Japan Proposes 20% Flat Tax on Crypto Assets Ahead of National Election

Join our free newsletter for daily crypto updates!