Iranian crypto exchange Bit24.cash has suffered a leak in which confidential customer data has been compromised, Cybernews has reported.
According to the publication, an incorrectly configured instance of MinIO object storage, which provides access to the cloud with users' KYC data, has been discovered.
The publication reporters have referred to a photograph of one of the platform's customers in which one can see his written acceptance of the rules, credit card and ID document.
Although the copy subsequently disappeared from the public domain, the compromise could potentially affect approximately 230,000 Iranian citizens who use Bit24.cash.
This type of breach is considered critical and attackers could use the personal data obtained to steal funds and carry out other attacks.