Share this article

FTX, BlockFi, Genesis Customer Data Compromised in Kroll Hack

A ‘cybersecurity incident’ affected Kroll, which gathers customer claim data on behalf of bankrupt companies.

Updated Aug 25, 2023, 2:41 p.m. Published Aug 25, 2023, 7:44 a.m.
jwp-player-placeholder

Customer data of bankrupt crypto exchange FTX, Genesis and lender BlockFi have been compromised due to a hack of Kroll, a third party agent that manages creditor claims on behalf of bankrupt companies.

Crypto account passwords and other sensitive data weren’t affected, but customers were warned to be on the lookout for scammers impersonating parties in the bankruptcy. Genesis and CoinDesk are part of the same parent company, Digital Currency Group.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the State of Crypto Newsletter today. See all newsletters

An “unauthorized third party gained access to certain BlockFi client data housed on Kroll’s platform,” BlockFi said in a tweeted statement, and FTX said it was “closely monitoring the situation.”

While internal systems at both crypto firms are intact, the incident may have raised fears that the personal information could be used by malicious actors attempting to extract still juicier details such as seed phrases or passwords.

Kroll, which did not immediately respond to a request for comment from CoinDesk, is a bankruptcy service provider for numerous companies, not just in the crypto sector. Kroll’s website also promotes a cybersecurity consultancy service, involving “elite cyber risk leaders uniquely positioned to deliver end-to-end cyber security services worldwide.”

In a statement published on its sites for the FTX and Genesis bankruptcy cases, Kroll said the hack stemmed from a SIM-swapping attack against one of its employees. The hacker accessed online files including customers' names, addresses, email addresses and size of their claim, Kroll said.

FTX and BlockFi both filed for bankruptcy in November last year, after CoinDesk leaked details of FTX’s balance sheet, and both are undergoing legal proceedings to wind up and restore funds to creditors. Earlier this week a Delaware court heard that legal fees are draining $1.5 million per day from the estate.

Read more: This Is How Scammers Can Drain Your Crypto Wallet

UPDATE (Aug. 25, 14.41 UTC): adds statement from Kroll website, confirms Genesis was affected throughout story.

Mehr für Sie

Protocol Research: GoPlus Security

GP Basic Image

Was Sie wissen sollten:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Save the Children Introduces Bitcoin Fund to Streamline Crisis Response

Save the Children

New fund enables Save the Children to hold bitcoin, pilot digital wallets, and speed up emergency aid delivery.

What to know:

  • Save the Children has launched a Bitcoin Fund to hold cryptocurrency donations for up to four years, allowing donors more control over conversion timing.
  • The fund aims to enhance the speed and efficiency of aid delivery by utilizing blockchain technology and piloting new forms of direct assistance.
  • This initiative reflects a growing interest in decentralized finance to reduce costs and increase transparency in humanitarian aid.