A hacker has stolen data on over 1k users from CryptoTrader.Tax, a web service used to calculate & file cryptocurrency taxes.
Recently, the hacker were able to broke into a CryptoTrader.Tax marketing & user service employee’s account on a support center platform, consistent with a source who found the hacker on a dark web forum. With this access, the hacker was able to see users names, email addresses, payment processor profiles and mgs sometimes containing cryptocurrency incomes.
The hacker then screengrabbed samples of the personal data, posted them on the forum to entice potential buyers of the data trove & sent additional pictures to the source, sharing the evidences.
The co-founder and the chief executive of CryptoTrader.Tax, David Kemmerer, confirmed that a hacker gained unauthorized access earlier on 7th April to the marketing and customer service employee’s account. The hacker was able to see support center details within the materials and downloaded a file containing 13k rows of data, including 1,082 unique email addresses, Kemmerer added.
CryptoTrader.Tax’s security team investigated the breach and located tax filing account passwords and CryptoTrader.Tax’s website weren’t compromised, Kemmerer added. The team then alerted parties suffering from the breach and took steps to enhance security measures & monitoring systems across internal and 3rd-party apps, Kemmerer added.
Operated by Kansas City-based Coin Ledger Inc., CryptoTrader.Tax permits its users to import trades from 36 different crypto exchanges and auto-generate digital assets income gains and losses in tax reports exportable to TurboTax, the favored tax preparation software.
To buy subscriptions, premium users also enter billing information into Stripe, a payment processor. Stripe is connected to CryptoTrader.Tax’s support center platform and thereby reveal users mail addresses and general locations, but it doesn’t expose physical addresses or credit, debit and banking data, consistent with the Stripe website.
The hacker also accessed marketing communications, referral numbers, commission earnings & revenues from affiliates who promote the CryptoTrader.Tax service on websites and social media, consistent with the materials reviewed by Kemmerer.