Transak, a fiat-to-cryptocurrency payment gateway, yesterday suffered a data breach affecting 1.14% of its users.
According to the company's blog, an attacker gained unauthorized access to an employee's laptop through a sophisticated phishing attack.
The attacker then used the compromised credentials to access a third-party KYC provider, which Transak uses for document scanning and verification services.
This resulted in the exposure of sensitive personal data, including names and other personally identifiable information, but the company clarified no financial data was compromised.
Transak has reported that 92,554 users were affected and is currently working with law enforcement and relevant data protection authorities to address the breach.