Kroll reveals FTX customer info exposed in August data breach

Kroll disclosed an August data breach in which a SIM-swap against an employee's mobile account allowed attackers to access files containing personal data of FTX, BlockFi, and Genesis creditors—information that included contact details, claim and account identifiers, and coin holdings/balances. Threat actors used that data to send targeted phishing messages that referenced victims' balances and attempted to trick them into revealing wallet seed phrases, putting their cryptocurrency assets at risk; Kroll says the incident did not affect FTX systems or passwords.