CryptoTrader.Tax trader data stolen

A hacker successfully infiltrated CryptoTrader.Tax, an online platform used for cryptocurrency tax calculations and filings, and stole data belonging to more than 1,000 users.

The hacker had access to sensitive user information including

• names,
• email addresses,
• payment processor profiles,
• messages that sometimes contained details about cryptocurrency earnings.

Screenshots of this compromised information were shared on a dark web forum, aiming to attract potential buyers for this data. The breach occurred on April 7, during which the hacker downloaded a file containing 13,000 rows of data, including 1,082 unique email addresses. However, passwords for tax filing accounts and CryptoTrader.Tax’s website remained uncompromised.

Besides the user data, the hacker also accessed marketing communications, referral numbers, commission earnings, and revenues from affiliates promoting the CryptoTrader.Tax service on various platforms.

The breach was executed by compromising the account of a marketing and customer service employee via a support center platform.

CryptoTrader.Tax, confirmed the unauthorized access and the extent of the breach. The platform's security team promptly investigated the incident, concluding that tax filing account passwords and the website itself were not compromised. They then alerted affected parties and implemented enhanced security measures and monitoring systems across both internal and third-party applications.