Crypto.com suffered a security breach in 2023 linked to the Scattered Spider hacking group, which exposed personal information of a small number of users, a Bloomberg investigation revealed.

The attack involved social engineering tactics where teenage hackers, including an 18-year-old named Noah Urban, tricked Crypto.com employees into handing over login credentials.

“I was a victim of this particular breach. I reported to them that their system has been breached because everyone around me who use crypto [.]com has been receiving unauthorized transactions, said one X user @0XMerkleTree.

This story is an excerpt from the Unchained Daily newsletter.

Crypto.com CEO Kris Marszalek addressed reports that the breach in question had been previously undisclosed by the crypto exchange, saying that it was reported in an NMLS Notice of Data Security incident filing in 2023.

“The incident was contained within hours, no customer funds were accessed or ever at risk, and impacted an extremely limited number of our users’ partial PII [personally identifiable information],” said Marszalek.