Data breach potentially exposing 400k Bitfinex customers, but leak content put in question
Learn More
Bitfinex, a major cryptocurrency exchange, is at the center of a significant data breach controversy involving around 2.5 terabytes of data from roughly 400,000 customers. FSociety gangs assert possession of not just trading data but also the personal details and KYC (Know Your Customer) information, and are threatening to leak the data.
Doubts have been raised regarding the authenticity of the breach by Tether's CEO, Paolo Ardoino. He acknowledged that the hackers, claiming to be from the FSociety group, released two links showing a sample of 22,500 email addresses and passwords. Only 5,000 of these 22,500 credentials matched actual Bitfinex user information. Ardoino emphasized that Bitfinex does not store plaintext passwords or two-factor authentication (2FA) details in clear text.
Ardoino also highlighted that the hackers hadn't made direct contact with Bitfinex or demanded a ransom, which is unusual if the hack were genuine.
It's possible that the leaked data is compiled from other cryptocurrency breaches, since many users reuse passwords across different platforms. Further suspicion was cast by a security researcher's suggestion that the hackers might be using the incident to market their hacking tool.
Bitfinex is investigating the claims but has not detected any system breaches and affirmed that users' funds are safe. The exchange encourages users to stay cautious and report any suspicious behavior while continuing to analyze the situation.