Skip to main content

Hacked KYC data collected from top exchanges for sale on the dark web - Cryptoline News

xxx

"According to reports coming from CCN, a hacker is selling hacked KYC data on the dark web, data which the hacker claims to have collected from some of the cryptocurrency exchanges such as Poloniex, Binance, Bittrex and Bitfinex."

From "Hacked KYC data collected from top exchanges for sale on the dark web - Cryptoline News".

Well, whether this is true or not, it does rather point to the fact that there are better places to store KYC data. Places that have extensive security in place already and spend gazillions on maintaining it, places that are regulated and held to account your identity is stolen and places where the costs of collecting KYC are high and rising. We call these places “banks” and it seems rather obvious to me that cryptocurrency exchanges, mobile phone shops and, for that matter, other banks should be using this bank KYC data instead of trying to do their own expensive and imperfect KYC in parallel.

Comments

Popular posts from this blog

We could fix mobile security, you know. We don't, but we could

Earlier in the week I blogged about mobile banking security , and I said that in design terms it is best to assume that the internet is in the hands of your enemies. In case you think I was exaggerating… The thieves also provided “free” wireless connections in public places to secretly mine users’ personal information. From Gone in minutes: Chinese cybertheft gangs mine smartphones for bank card data | South China Morning Post Personally, I always use an SSL VPN when connected by wifi (even at home!) but I doubt that most people would ever go to this trouble or take the time to configure a VPN and such like. Anyway, the point is that the internet isn’t secure. And actually SMS isn’t much better, which is why it shouldn’t really be used for securing anything as important as home banking. The report also described how gangs stole mobile security codes – which banks automatically send to card holders’ registered mobile phones to verify online transactions – by using either a Trojan...