logo

Iranian Crypto Exchange Misstep Exposes User Details

ID: ccabe9f3-9fc9-5012-b7d1-f3bdf1d6dfea

STIX ID: report--ccabe9f3-9fc9-5012-b7d1-f3bdf1d6dfea

Feed Name: Dark Reading

Threat Score
60/100

Date Published: 2024-01-08

Date Updated: 2026-04-21

Author: Dark Reading Staff

...
...

A misconfigured MinIO (S3-compatible) object storage instance used by Iranian crypto exchange bit24.cash exposed verification documents — including consent letters, passports, and credit card details — for approximately 230,000 Iranian users. Researchers reported the open S3 buckets, the storage has been secured, and the company states there is no evidence of unauthorized access.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.