Security Incident BtcTurk.com compromised 516k accounts are at risk due to a data breach!
- Submitted by Synergy
- Insert date
Data Breach Details Discussion
BtcTurk, the exchange introduced Bitcoin to Turkey is the first and the biggest Bitcoin (BTC) and cryptocurrency trading platform suffered a data breach that impacted 516,954 accounts. The attack led to the exposure of data including
First name, Last name, user identification number, Email, Address information, Date of Birth, Telephone number, Date of last login before July 2018, Last login IP address before July 2018, Encrypted but can be breakable passwords (bin2hex with b64).
According to threat actor the password hashing algorithm is the same as Mathway data breach.
User File - Balance/wallet File - Apikey File
(Dehashed Email Plain-text Passwords) Sample released from former employee.
leakeddatabases.com
Sample of User File:
Sample of Apikey File:
Sample of Balance/wallet File:
Sample of dehashed email password:
Sample of merged file with User File - Balance/wallet File
“They assured users that their funds were safe, and no critical data was stolen.“
Stolen data, User File (passwords breakable) - Balance/wallet File - Apikey File
“BtcTurk has assured its users that their passwords were not compromised.“
leakeddatabases.com
Source:
coingeek.com
Breach File Total Size: 266.71 M
Credit Gnostic Players (French hackers) and former employee.
This sample (btcturk_apikey_file & btcturk_user_file & btcturk_balance_wallet_file & btcturk_compromised_passwords) data was gathered from employee attempting to sell critical company files. Afterwards, data was later put up for sale on a dark market website.
leakeddatabases.com
First name, Last name, user identification number, Email, Address information, Date of Birth, Telephone number, Date of last login before July 2018, Last login IP address before July 2018, Encrypted but can be breakable passwords (bin2hex with b64).
According to threat actor the password hashing algorithm is the same as Mathway data breach.
User File - Balance/wallet File - Apikey File
(Dehashed Email Plain-text Passwords) Sample released from former employee.
Mail:Pass - BtcTurk.com Dehashed Email Plain-text Passwords
Read more about BtcTurk Security Incident https://leakeddatabases.com/threads/btcturk-com-compromised-516k-accounts-are-at-risk-due-to-a-data-breach.1207/ @wetr0v this sample (Dehashed Email Plain-text Passwords) was made public by a former employee back in 2019 who launched a phishing attack...
leakeddatabases.com
Sample of User File:
Sample of Apikey File:
Sample of Balance/wallet File:
Sample of dehashed email password:
Sample of merged file with User File - Balance/wallet File
“They assured users that their funds were safe, and no critical data was stolen.“
Stolen data, User File (passwords breakable) - Balance/wallet File - Apikey File
“BtcTurk has assured its users that their passwords were not compromised.“
Mail:Pass - BtcTurk.com Dehashed Email Plain-text Passwords
Read more about BtcTurk Security Incident https://leakeddatabases.com/threads/btcturk-com-compromised-516k-accounts-are-at-risk-due-to-a-data-breach.1207/ @wetr0v this sample (Dehashed Email Plain-text Passwords) was made public by a former employee back in 2019 who launched a phishing attack...
leakeddatabases.com
Source:
Turkish exchange BtcTurk admits to 2018 data breach affecting over 500K users
BtcTurk had initially denied the hack, but after hackers started posting some of the data they accessed, the exchange was forced to come clean.
coingeek.com
Breach File Total Size: 266.71 M
Credit Gnostic Players (French hackers) and former employee.
This sample (btcturk_apikey_file & btcturk_user_file & btcturk_balance_wallet_file & btcturk_compromised_passwords) data was gathered from employee attempting to sell critical company files. Afterwards, data was later put up for sale on a dark market website.
Leaks - Turkish Exchange BtcTurk Stolen Critical Users Data Leaked Download!
Read more about BtcTurk Security Incident https://leakeddatabases.com/threads/btcturk-com-compromised-516k-accounts-are-at-risk-due-to-a-data-breach.1207/ The data breach dated back to 2018 but wasn't identified until years later when the data finally surfaced and this sample data was gathered...
leakeddatabases.com