Transak Hit by Phishing Attack, Personal Data of 92K Users Exposed

Last Updated on December 19, 2024

Adam Headshot
Written by

Key Takeaways:

  • Data breach impact: Over 92,000 Transak users had personal data exposed following a phishing attack.
  • Compromised data: Names, birth dates, IDs, and selfies were leaked, but no financial information was affected.
  • Phishing source: The breach stemmed from compromised credentials of a third-party KYC provider’s system.

Transak, a crypto on-ramp provider, disclosed a data breach that exposed the personal information of over 92,000 users, about 1.14% of its user base.

The breach resulted from a phishing attack on an employee’s laptop, allowing an attacker to access credentials and infiltrate a third-party Know Your Customer (KYC) system.

Compromised data includes names, birth dates, passports, driver’s licenses, and selfies.

However, Transak assured users that no financial information such as emails, passwords, or payment details was affected.

Impacted users will be contacted directly, while others unaffected by the breach won’t receive notifications.

Authorities in the UK, EU, and the US have been informed.

This breach mirrors similar incidents, including one at Fidelity Investments, which recently faced its fourth data breach in a year.

Despite these concerns, Transak continues to provide fiat-to-crypto services for platforms like Binance, MetaMask, and Coinbase.

About The Author

Adam Headshot
Written by

Co-Founder / Managing Editor

Adam Morris, the co-founder of Crypto Head and a respected crypto expert, offers insightful commentary and analysis on cryptocurrency, NFTs, and the evolving digital landscape.

His extensive experience and features in top-tier publications like Forbes and CNN underscore his deep understanding of the crypto world and its future potential.

Check Adam out on: