CyptoTrader.Tax has suffered a hack in which information from over 1,000 users was taken. The attacker got into an account on a support platform belonging to a staffer.
CyptoTrader.Tax has suffered a hack in which information from over 1,000 users was taken
David Kemmerer, the CEO of the site and one of its co-founders, indicated that an attacker received access without permission in early April to the staffer’s account. With this access, hackers can view customers’ names, email addresses, payment processor records, and messages that sometimes contain crypto income. Hackers then sifted through samples of this sensitive information, posted them on forums to entice potential data buyers, and submitted more images to the source.
He noted that the attacker could view support center information and took a file that had data with the inclusion of 1,082 email addresses.
He stated:
“A hacker gained unauthorized access on April 7 to the marketing and customer service employee’s account. The hacker was able to see support center details in the materials and downloaded a file containing 13,000 rows of information, including 1,082 unique email addresses.”
CryptoTrader. Tax’s security team investigated the breach and found the password of the taxpayer account and CryptoTrader. The tax’s website is not compromised. The team then notified the parties affected by the breach and took steps to improve security measures and to monitor systems across internal and third-party applications.
Operated by Kansas City-based Coin Ledger Inc., CryptoTrader.Tax allows users to import trades from 36 cryptocurrency exchanges and auto-generate cryptocurrency income gains and losses in tax reports exportable to TurboTax, the popular tax preparation software.
To pay for subscriptions, premium users also enter billing information into Stripe, a payment processor. Stripe is connected to CryptoTrader. Tax’s support center platform and shows customers’ email addresses and general locations, but it does not expose physical addresses or credit, debit and banking information
Read more:
- Google Rescinded The License Of Philippines Business Sykes As Running A Scam Involving Bitcoin
- Empire Market, A Major Darknet Marketplace For Buying And Selling Illicit Goods, Has Been Offline For Over 48 Hours