Kroll Employee SIM-Swapped for Crypto Investor Data
Summary: Kroll disclosed that on Aug. 19, 2023, a threat actor convinced T-Mobile to transfer a Kroll employee's phone number to the actor's device in a SIM-swapping attack, giving access to files with personal information of bankruptcy claimants in the BlockFi, FTX and Genesis matters. KrebsOnSecurity reported that readers who received breach notices from Kroll also shared phishing emails spoofing FTX and claiming recipients were eligible to withdraw digital assets.
Why it matters: People with financial ties to BlockFi, FTX or Genesis now face heightened risk of SIM-swapping and phishing themselves, and phishing messages spoofing FTX were already going out the same day notices arrived. Krebs notes that SIM swaps of T-Mobile numbers were sold as a service for about $1,500, with more than 100 such incidents against T-Mobile employees in the second half of 2022.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026