Contents
Blockchain Identity Firm Fractal ID Breach Alleged by Stormous Ransomware Group
Claim of Data Breach
Stormous Ransomware Gang Claims Access to Fractal ID KYC Data
The Stormous ransomware gang has asserted that they have hacked into the blockchain identity firm Fractal ID, obtaining over 10 gigabytes of customer data, including know your customer (KYC) details of more than 300,000 users. This breach reportedly includes personal photos, bank statements, proof of address, as well as ETH/BTC addresses.
Details of the Data Extraction
Promise of Data Protection Report
According to Stormous, they not only extracted data from Fractal ID’s KYC system but also from other related systems. Screenshots of internal KYC systems and identity document scans were shared by the gang. They have also indicated their intention to release a report on Fractal ID’s data protection practices in the future.
Previous Security Incident
Fractal ID’s Response to Earlier Breach
Fractal ID had previously experienced a data breach on July 14, affecting a smaller number of customers. The breach, attributed to unauthorized access using compromised credentials, allowed data extraction through an API. Following the incident, Fractal ID engaged cyber security firm Resonance to investigate further and analyze potential vulnerabilities.
Current Alleged Incident
Verification and Response Pending
The recent claim by the Stormous ransomware gang, if verified, would mark a significant cybersecurity incident for Fractal ID within the same year. At present, Fractal ID has not commented on the alleged breach, and further details regarding the extent of the data breach and its implications are awaited. Cyber Daily has reached out to Fractal ID for their response.
About the Author
David Hollingworth
David Hollingworth, with over 20 years of experience in technology journalism, is delving into the realm of cyber security. His passion for discussing cybersecurity and its implications is evident in his work, with a touch of Lego adding a unique twist to his perspective.
The information in the article is for informational purposes only. It does not constitute any investment advice. The author and CryptoBlockNews.com are not responsible for your profits or losses arising from your investments. Investment is ultimately based on many foundations such as knowledge, accumulation, experience, research and personal decisions.
