Stormous Ransomware Gang Strikes Blockchain Identity Firm Fractal ID in Cyberattack

Fractal ID Hacked by Stormous Ransomware Gang: Blockchain Firm's Security

Blockchain Identity Firm Fractal ID Breach Alleged by Stormous Ransomware Group

Claim of Data Breach

Stormous Ransomware Gang Claims Access to Fractal ID KYC Data

The Stormous ransomware gang has asserted that they have hacked into the blockchain identity firm Fractal ID, obtaining over 10 gigabytes of customer data, including know your customer (KYC) details of more than 300,000 users. This breach reportedly includes personal photos, bank statements, proof of address, as well as ETH/BTC addresses.

Details of the Data Extraction

Promise of Data Protection Report

According to Stormous, they not only extracted data from Fractal ID’s KYC system but also from other related systems. Screenshots of internal KYC systems and identity document scans were shared by the gang. They have also indicated their intention to release a report on Fractal ID’s data protection practices in the future.

Previous Security Incident

Fractal ID’s Response to Earlier Breach

Fractal ID had previously experienced a data breach on July 14, affecting a smaller number of customers. The breach, attributed to unauthorized access using compromised credentials, allowed data extraction through an API. Following the incident, Fractal ID engaged cyber security firm Resonance to investigate further and analyze potential vulnerabilities.

Current Alleged Incident

Verification and Response Pending

The recent claim by the Stormous ransomware gang, if verified, would mark a significant cybersecurity incident for Fractal ID within the same year. At present, Fractal ID has not commented on the alleged breach, and further details regarding the extent of the data breach and its implications are awaited. Cyber Daily has reached out to Fractal ID for their response.

About the Author

David Hollingworth

David Hollingworth, with over 20 years of experience in technology journalism, is delving into the realm of cyber security. His passion for discussing cybersecurity and its implications is evident in his work, with a touch of Lego adding a unique twist to his perspective.

Exit mobile version