Bitfinex, a prominent cryptocurrency exchange, has revealed that it experienced a minor security incident between October 30th and November 5th when one of its customer support agents fell victim to a hack. This incident resulted in a series of phishing attacks against Bitfinex users, but the exchange has assured that little damage was done.
According to Bitfinex, the security breach was limited to a small portion of their customer support boards, which contained partial, incomplete, and outdated information. The breach occurred when an individual or group managed to access this data through a phishing attack targeting a customer support agent. Fortunately, the compromised agent did not have “senior permissions,” meaning their access to support tools and help desk tickets was restricted.
Bitfinex emphasized that its core systems remained uncompromised, and no customer funds were lost in the incident. The exchange stated, “No server, wallet, or database infrastructure was accessed,” and clarified, “At no time were customer assets on the platform at risk, nor was password information accessible. Most of the affected customer accounts were empty or inactive.”
While Bitfinex assured that the issue has been resolved, the exchange is still conducting a thorough review of the incident and the compromised information. It is actively reaching out to affected customers. Additionally, Bitfinex promptly informed law enforcement about the breach and is cooperating with investigation authorities to identify and track down the individual or group responsible for the phishing attack.
Bitfinex also highlighted its strong track record in successfully prosecuting individuals who have attempted to attack its operations in the past. Despite this security incident, Bitfinex regularly reviews its security procedures and mandates that all employees undergo cybersecurity training.
Bitfinex, founded in Hong Kong in 2012, has been led by CEO Jean-Louis van der Velde since 2013. The exchange continues to maintain a high level of user activity, with over 800,000 visits to its platform in the past month.
ALSO READ
- Crypto Wallet Trezor Investigates Phishing Campaign
- FBI Issues Warning About Phishing Scams and Social Media Account Hijackers
- Bitfinex Securities Launches Tokenized Bond