{"id":56032,"date":"2022-01-17T16:15:10","date_gmt":"2022-01-17T14:15:10","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=56032"},"modified":"2025-09-04T04:27:25","modified_gmt":"2025-09-04T01:27:25","slug":"btc-alpha-confirms-partial-leak-of-client-data","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/btc-alpha-confirms-partial-leak-of-client-data\/","title":{"rendered":"BTC-Alpha confirms partial leak of client data"},"content":{"rendered":"<p>Ransomware operators LockBit published user data from BTC-Alpha, a UK-based cryptocurrency exchange with Ukrainian roots. The Telegram channel <a href=\"https:\/\/t.me\/dataleak\/2472\">Information Leaks<\/a> drew attention to this.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"334\" src=\"https:\/\/u1f987.com\/wp-content\/uploads\/2022-01-17-15.12.29-1024x334.jpg\" alt=\"BTC-Alpha confirms partial data leak\" class=\"wp-image-161890\" srcset=\"https:\/\/u1f987.com\/wp-content\/uploads\/2022-01-17-15.12.29-1024x334.jpg 1024w, https:\/\/u1f987.com\/wp-content\/uploads\/2022-01-17-15.12.29-300x98.jpg 300w, https:\/\/u1f987.com\/wp-content\/uploads\/2022-01-17-15.12.29-768x251.jpg 768w, https:\/\/u1f987.com\/wp-content\/uploads\/2022-01-17-15.12.29.jpg 1280w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>Data: &#8220;Information Leaks&#8221;.<\/figcaption><\/figure>\n<p>According to the channel, the 362,479-row table contains hashed passwords, email addresses, registration dates, countries and IP addresses of the exchange&#8217;s clients.<\/p>\n<p>BTC-Alpha&#8217;s CEO Vitaliy Bodnar, in a ForkLog interview, confirmed the breach and linked it to the November 2021 attack on the exchange. He stressed that the dump of the database only partially contains accurate information about users; he said that the rest of the data were altered by hackers.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201c362,479 people \u2013 that was the real number of the exchange&#8217;s users at the time of the attack on 1 November 2021. In the distributed database some elements match, some do not. We acknowledge that hackers deliberately altered part of the data so that those who want to buy the database would not receive fully accurate information,\u201d the platform&#8217;s CEO said.<\/p>\n<\/blockquote>\n<p>Vitaliy Bodnar noted that as a result of the leak none of the users lost funds; the passwords that fell into the hackers&#8217; hands are stored encrypted. He also said that the name of the LockBit operators began to appear in ransom-demand letters about a month after the attack.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cLockBit may take some responsibility now, because there is a high probability they were paid for this,\u201d Bodnar added.<\/p>\n<\/blockquote>\n<p>The investigation into the incident is ongoing; Ukraine&#8217;s General Prosecutor&#8217;s Office has opened a criminal case.<\/p>\n<p>BTC-Alpha drew attention to the rising number of phishing attacks impersonating popular wallets and exchanges and advised users to always verify the sender and not click unfamiliar links to protect access to their computers and funds.<\/p>\n<p>Earlier in November 2021, unknown <a href=\"https:\/\/u1f987.com\/en\/news\/btc-alpha-exchange-attacked-by-hackers-user-funds-secure\">hacked the computers of several BTC-Alpha employees<\/a>. They stole passwords stored in encrypted form, but funds, according to the exchange&#8217;s representatives, were not harmed.<\/p>\n<p>Among possible causes of the attack on BTC-Alpha was a data leak. After the incident the platform increased withdrawal times and <a href=\"https:\/\/u1f987.com\/en\/news\/btc-alpha-extends-withdrawal-times-and-imposes-mandatory-two-factor-authentication-after-attack\">introduced mandatory 2FA<\/a>.<\/p>\n<p>Read ForkLog&#8217;s Bitcoin news on our <a href=\"https:\/\/telegram.me\/forklog\" target=\"_blank\" rel=\"nofollow noopener\">Telegram<\/a> \u2014 crypto news, rates and analytics.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ransomware operators LockBit published user data from BTC-Alpha, a UK-based cryptocurrency exchange with Ukrainian roots.<\/p>\n","protected":false},"author":1,"featured_media":56033,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[2262,1166,1188,16],"class_list":["post-56032","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-btc-alpha","tag-centralized-exchanges-cex","tag-data-breach","tag-ukraine"],"aioseo_notices":[],"amp_enabled":true,"views":"61","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/56032","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=56032"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/56032\/revisions"}],"predecessor-version":[{"id":56034,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/56032\/revisions\/56034"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/56033"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=56032"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=56032"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=56032"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}