Huobi Exchange Had Leaked OTC Transaction Info, User Data From 2017 To 2021: Report

Key Points:

• Huobi exchange experienced a large data leak, including OTC transaction info, user and VIP data, and technical infrastructure data.
• The leak was caused by the irregular operation of personnel in the S3 barrel of the Japanese station’s test environment, and relevant user info was isolated in Oct 2022.

Huobi exchange suffers massive data leak, including OTC transactions, user/VIP info, and tech data. Huobi responded, but the incident raises data security concerns.

Wu reported that Huobi exchange has suffered a massive data leak, according to Aaron Phillips, a white hat security researcher.

The leaked data includes OTC transaction information, user information, VIP user information, and technical infrastructure data. The leaked data is said to have occurred between 2017 and 2021.

An attacker exploiting Huobi’s mistakes would have had the opportunity to carry out the largest crypto theft in history. The company has previously reported handling over a billion dollars a day in trading volume. If Huobi hadn’t taken action, this breach could have been leveraged to steal user accounts and assets. The company deleted the compromised account and their users are no longer at risk.

Aaron Phillips wrote in a blog post

Huobi has confirmed the incident and stated that it was caused by the irregular operation of relevant personnel in the S3 barrel of the test environment of the Japanese station. The relevant user information was completely isolated on October 8, 2022.

After the incident was discovered by the white hat team, Huobi’s security team took action on June 21, 2023, and immediately closed the relevant file access permissions. The vulnerability has been fixed, and all relevant user information has been deleted. Huobi has thanked the White Hat team for their contributions to its security.

Huobi’s updated response stated that the OTC data mentioned in the article is not real transaction data, but test data. The user information leak only involves 4,000 users. The log shows that only the white hat team has downloaded the data, and the team has also stated that they have deleted it. Therefore, no actual leakage has occurred.

DISCLAIMER: The information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your research before investing.

Join us to keep track of news: https://linktr.ee/coincu

Thana

Coincu News