A previously undisclosed security breach at Crypto.com was carried out by a teenage hacker and an accomplice who compromised an employee's account.
The attack, detailed by Bloomberg, was the work of Noah Urban, a member of the notorious cybercriminal gang Scattered Spider.
Urban's group specialized in phishing attacks against employees of technology, telecommunications, and cryptocurrency companies.
In this case, he and a hacker known as "Jack" infiltrated the account of a Crypto.com employee, a common tactic for accessing sensitive user data.
The platform stated the breach affected the personal information of a very small number of people and that no customer funds were stolen.
The attack took place before March 2023, prior to Urban's arrest by the FBI.