Crypto e-commerce platform Bitrefill accuses North Korea of stealing 18,500 purchase records

Bitrefill experienced a March 1 breach attributed to North Korea’s Lazarus Group after a compromised employee laptop and exfiltrated legacy credential allowed attackers to access a snapshot of production secrets, parts of the database, and certain cryptocurrency wallets; ~18,500 purchase records (emails, crypto addresses, IP metadata) were accessed and some company wallets were drained, with the company restoring services on March 5 and absorbing losses through operational capital.