ZachXBT

Security

Noah

Kris Marszalek, the CEO of the Singapore-based cryptocurrency exchange Crypto.com, has stepped forward to tackle misleading rumors circulating about a past security breach. He stated that the claims suggesting that the company failed to report or disclose a security incident are entirely baseless.&nbsp;
Recently, crypto investigator ZachXBT <a href="https://x.com/zachxbt/status/1960325445305372760" target="_blank" rel="noopener noreferrer nofollow">stated</a> that Bloomberg reported a breach that impacted Crypto.com in 2023. He said that the breach had compromised users’ personal information. However, the exchange did not inform its users about it.
However, Marszalek refused the claims. He revealed in his X <a href="https://x.com/kris/status/1969917615276793990" target="_blank" rel="noopener noreferrer nofollow">post</a> that in the year 2023, the exchange had detected a phishing campaign targeting one of its employees. He further added that the incident was reported through the NMLS Notice of Data Security incident filing, and additional reports were filed with the relevant jurisdictional regulators.&nbsp;
He emphasized that the incident was contained within hours, and the exchange ensured that no customer funds were placed at risk and that only a minimal number of users’ partial personal information (PII) was impacted.&nbsp;
The recent incident follows a previous event where the exchange posted on X with the message: “Good news: Crypto never sleeps. Bad news: Crypto never sleeps.”&nbsp;
ZachXBT <a href="https://x.com/zachxbt/status/1969712380939833447" target="_blank" rel="noopener noreferrer nofollow">responded</a>, stating that the bad news is that the exchange has covered up a breach that affected users’ personal information. He further <a href="https://x.com/zachxbt/status/1969718961567940951" target="_blank" rel="noopener noreferrer nofollow">claimed</a> that the exchange has experienced several breaches in the past.&nbsp;
<h2 class="wp-block-heading" id="scattered-spider-breach-at-crypto-com-sparks-criticism">Scattered Spider Breach at Crypto.com Sparks Criticism</h2>
On September 19, 2025, Bloomberg <a href="https://www.bloomberg.com/news/features/2025-09-19/multimillion-dollar-hacking-spree-scattered-spider-teen-s-jailhouse-confessions" target="_blank" rel="noopener noreferrer nofollow">reported</a> that Noah Urban, a member of the hacking group Scattered Spider, admitted that his group used phishing to get into a Crypto.com employee’s account sometime before early 2023, which let them see the personal information of some users.&nbsp;
The report also mentioned that some crypto experts criticized Crypto.com, saying the company should have been more open with the public about it. This criticism came as people were already worried about user data leaks, especially after the major exchange Coinbase had its <a href="https://www.cryptotimes.io/2025/05/15/coinbase-refuses-ransom-offers-20m-bounty-instead/" target="_blank" rel="noopener noreferrer nofollow">customer information stolen earlier</a> this year. Roelof Botha, a top executive at Sequoia Capital, was <a href="https://www.cryptotimes.io/2025/05/17/coinbase-hack-sequoia-executive-roelof-botha-also-a-victim/" target="_blank" rel="noopener noreferrer nofollow">also among the victims</a>.&nbsp;
However, Marszalek highlighted that the exchange has strong systems that keep getting better, and they take great pride in putting security first. This is supported by having more industry certifications than anyone else.&nbsp;
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 Also Read: <a href="https://www.cryptotimes.io/2025/09/19/crypto-com-adds-sei-network-custody-for-sei-token-security/" target="_blank" rel="noopener noreferrer nofollow">Crypto.com Adds Sei Network Custody for SEI Token Security</a>
</blockquote>

Crypto.com CEO Denies Breach Claims, Allegations, User Data

Table of Contents

The Crypto Times

Other articles published on Sep 22, 2025

Join our free newsletter for daily crypto updates!