Bitcoin ATM company Coin Cloud got hacked. Even its new owners don’t know how
Reading Time: 2 minutesIn November, the cybersecurity collective vx-underground wrote on X, formerly Twitter, that unknown hackers were claiming to have breached Coin Cloud, a bankrupt Bitcoin ATM company.
According to vx-underground, the hackers claimed to have stolen 70,000 pictures of customers taken from cameras embedded in the ATMs, as well as the personal data of 300,000 customers, which is alleged to include, ‘Social Security Numbers, date of birth, First Name, Last Name, e-mail address, Telephone Number, Current Occupation, Physical Address, and more.’
Nobody has claimed the hack publicly. A month on, what really happened to Coin Cloud remains a mystery, even according to the company’s new owner.
Coin Cloud was a company that maintained thousands of Bitcoin ATMs across the U.S. and Brazil, according to its official website, until the company filed for bankruptcy in February. In July, Genesis Coin, another Bitcoin ATM provider, acquired 5,700 ATMs from the since-defunct Coin Cloud, according to a press release published at the time. Genesis Coin was itself acquired earlier in January by Andrew Barnard and an associate, who owned another cryptocurrency ATM company called Bitstop.
‘The data breach happened a while ago as Coin Cloud has been hacked multiple times in the past when they were still an operating company,’ said Barnard. ‘I believe that data is just now being ransomed. It’s impossible to say [when] as there were little controls throughout the software development process and multiple international contractors had access to source code that contained secrets within it to access the [database],’ Barnard said in an email.
‘It doesn’t look like the services which Coin Cloud kept alive were recently breached from what we were shown,’ added Barnard. ‘Therefore it’s reasonable to assume this is data that has already been stolen from one of the previous times Coin Cloud was hacked. It’s an assumption, but a reasonable one. It’s impossible to really say when the data was compromised or who did it. So many vendors and internal employees had access to it that it could have happened at many different times over the years.’
Barnard said that if someone obtained the source code, which contained the admin credentials to the database, the hackers ‘would have access to all the [Know Your Customer] information of customers.’
Know Your Customer, or KYC, are checks carried out by tech and financial companies for verifying a person’s identity to prevent fraud and money laundering. KYC checks often rely on customers submitting scans of their identity documents.
‘We didn’t have a security team,’ the former employee said, adding that she believes Coin Cloud got hacked at least once last year, and that the company stored a lot of data in plaintext, meaning it wasn’t encrypted.
Reference: https://techcrunch.com/2023/12/12/bitcoin-atm-company-coin-cloud-got-hacked/
Ref: techcrunch
MediaDownloader.net -> Free Online Video Downloader, Download Any Video From YouTube, VK, Vimeo, Twitter, Twitch, Tumblr, Tiktok, Telegram, TED, Streamable, Soundcloud, Snapchat, Share, Rumble, Reddit, PuhuTV, Pinterest, Periscope, Ok.ru, MxTakatak, Mixcloud, Mashable, LinkedIn, Likee, Kwai, Izlesene, Instagram, Imgur, IMDB, Ifunny, Gaana, Flickr, Febspot, Facebook, ESPN, Douyin, Dailymotion, Buzzfeed, BluTV, Blogger, Bitchute, Bilibili, Bandcamp, Akıllı, 9GAG