BitMart Database Breach: 1.2M Records Leaked

🧵 Data Breach Summary

A significant data breach affecting BitMart.com has been disclosed on darkforums.st by a user under the alias Satanic. The threat actor claims responsibility for leaking over 1.2 million user records, which include email addresses, phone numbers, and other sensitive information.

The breach reportedly occurred after BitMart ignored multiple warnings and attempts to establish communication regarding the vulnerability. According to the leaker, the platform failed to take any preventative action or responsibility, which led to the full release of the data.

---

💥 Where and How?

The compromised dataset was posted publicly on darkforums.st, a well-known cybercriminal forum. The leak includes personally identifiable information that can be exploited for phishing attacks, SIM swapping, and identity theft.

The attacker stated that BitMart had been warned but chose to ignore the risks, demonstrating a lack of concern for their user base and cybersecurity posture.

🏢 Company Data Breach History

BitMart has a notable history of security incidents:

• In December 2021, the exchange suffered a hot wallet breach, leading to losses estimated between $150M and $196M in various cryptocurrencies.

However, this is the first known leak involving personal user data such as emails and phone numbers.

---

🛡️ Recommendations for Affected Users

To protect themselves, users should take the following steps:

• Change passwords immediately, using complex and unique combinations.
• Enable two-factor authentication (2FA) on all crypto and financial accounts.
• Be cautious of phishing attempts via email or SMS.
• Avoid reusing passwords across platforms.
• Monitor accounts for unusual activity.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.