Bitcoin

Source: Pixabay 
Iranian crypto exchange Bit24.cash users reportedly suffered a significant data breach exposing sensitive data of nearly 230K citizens. However, the exchange dismissed the allegation as “wholly untrue.” 
The breach was attributed to an alleged misconfigured storage system used by the exchange, according to a <a href="https://cybernews.com/security/iranian-crypto-exchange-leaks-passports/">team of researchers</a> at Cybernews, who initially brought the allegations to light. 
The misconfigured MinIO object storage system was left unprotected, granting access to S3 buckets containing users’ KYC documents. The data had information including consent letters, passport information, and credit card details, the researchers explained. 
“With access to such comprehensive personal and financial data, malicious actors could impersonate individuals, gain unauthorized access to accounts, execute fraudulent transactions, and potentially cause substantial financial and personal harm to the affected users.” 
Cybernews researchers later said that the storage is now secure and inaccessible. 
Bit24.cash is among the top 5 largest crypto exchanges in Iran, according to <a href="https://www.trmlabs.com/post/iran-crypto-economy">TRMlabs insights</a>. The nation adopted a <a href="https://en.mehrnews.com/news/147938/Govt-recognizes-cryptocurrency-industry-official-MP">pro-crypto stance</a> in 2019 to circumvent the sanctions imposed against it. Bit24.cash – “Wholly Untrue” 
In response to the claims, the exchange vehemently refuted the allegation calling it “inaccurate and misleading.” 
Hossein Amini, a security engineer at bit24.cash, assured that there is no evidence of data breach or unauthorized access to sensitive data and that user security remains Bit24.cash’s ‘utmost priorities.’ 
“The reference to a misconfigured MinIO instance granting access to S3 buckets containing KYC data is wholly untrue and does not align with our system architecture or security protocols,” Amini said. He confidently asserted that their MinIO instance and S3 buckets remain secure. 
Several breaches have occurred in the past due to unsecured access to users’ information. The recent potential breach of Strike, a <a href="https://cryptonews.com/guides/bitcoin/">Bitcoin</a> Lightning-based payment platform, flagged by online sleuth ZachXBT, claimed to have exposed private emails of users.

Iranian Crypto Exchange Bit24.cash Reportedly Exposes Sensitive Data of Nearly 230K Users

Cryptonews.com

Other articles published on Jan 9, 2024

Top Solana Alternatives For The Year 2024

Okcash: A Sustainable Cryptocurrency with Growing Investment Promise

Investors exploring Pushd presale; Chainlink and Litecoin drop

imToken’s Plea for Blacklist Removal: Engaging with Singapore’s MAS

Credefi Finance - Celebrating 2023's Triumphs and Gearing Up for an amazing start of 2024 with it...

BINK Token Skyrockets 30,000% and This Other Meme Coin Could Explode Next

Join our free newsletter for daily crypto updates!