Sensitive Data of Crypto Event Participants Illegally Sold

Concerns Over Data Breach in the Cryptocurrency Event Sector

Recent investigations by PANews have unveiled a disturbing trend in the handling of sensitive data collected during cryptocurrency industry events. Reports indicate that personal information of participants has been illegally sold under the pretext of 'marketing, promotion, and client acquisition.'

What Data Was Compromised?

The stolen data encompasses a wide array of personal details including:

• Full names
• Phone numbers
• Nationalities
• Job titles
• Company affiliations
• Social media links (personal and business)

These details were mainly collected during participant registrations for various cryptocurrency events.

Sampling the Illicit Data

Cointelegraph was able to obtain a sample list from an anonymous seller via Telegram. This sample included details from four separate events, each featuring between 60 to 100 participants. The events in question occurred primarily in the fall of 2024 and included notable conferences with attendees from Southeast Asia and India.

The Scale of Data Exposure

The lists provided by the seller represent only a small portion of the available illicit data. The seller also shared images associated with events like Blockchain Fest and Devcon. One striking revelation is that a single list purportedly contains information on approximately 1,700 attendees from the November 2024 AIBC conference held in Malta.

The Business Behind the Breach

The anonymous seller is reportedly offering access to these lists at a drastically reduced price—down from nearly $4,000 to just $650 for a limited number of buyers. The seller claims that the revenue will be utilized to acquire additional participant data lists, suggesting a well-organized operation focused on the illegal sale of sensitive information.

Risk of Social Engineering Attacks

Experts warn that the accessibility of this sensitive information poses significant security risks, particularly concerning the potential for social engineering scams aimed at cryptocurrency investors. With detailed personal information readily available, the threat of attacks aimed at breaching users' cryptocurrency wallets increases substantially.

Anonymity and Origin of the Sellers

Both the seller and the data compiler remain shrouded in anonymity, but certain indicators suggest potential Russian links—one of the datasets was labeled in Russian, and AI analysis hints at the seller being a native Russian speaker.

Conclusion

The disturbing trend of data compromises in the cryptocurrency industry raises urgent questions about privacy and security practices at major blockchain events. Participants must remain vigilant and implement stringent security measures to protect their personal information from potential misuse.