Crypto Exec’s $1.8M SIM-Swap Lawsuit Has ‘Critical Holes,’ Says AT&T

AT&T has again argued against allegations it was in part responsible for a SIM-swap hack that cost crypto exec Seth Shapiro $1.8 million.

AccessTimeIconJan 24, 2020 at 4:03 p.m. UTC
Updated Sep 13, 2021 at 12:11 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

AT&T says a lawsuit over a $1.8 million crypto hack fails to show how the U.S. telecom giant was responsible.

The case, brought by VideoCoin's head of strategy, Seth Shapiro, in October, alleges that, in 2018, AT&T employees were responsible for transferring control of his phone number to hackers, who used it as part of a SIM-swap scam that drained his exchange accounts of more than $1.8 million worth of cryptocurrencies.

In a Jan. 22 filing in support of its December motion to dismiss the case, AT&T says Shapiro's allegation has a "fundamental problem" because it "jumps" from hackers gaining his phone number to the withdrawal of millions of dollars worth of cryptocurrency.

With the hackers allegedly having paid off AT&T employees – who've since been fired and are being prosecuted in criminal court – to gain control of his phone, Shapiro's lawyer, Andrew Calderon, has accused the company of "systemic negligence." He previously told CoinDesk: "AT&T has a rich and troubling heritage of taking less than adequate measures to protect its customers’ data from unauthorized access.”

But according to AT&T's December dismissal motion, Shapiro's allegation relies on "bare thin conclusion." Hackers needed more than a phone number to access exchange accounts, the dismissal filing reads, and the plaintiff has not said how hackers knew about his accounts and how they knew he was an AT&T customer. The motion also says Shapiro has not conclusively shown how the fault for the hack lies at AT&T's door.

Wednesday's filing further claims: "Mr. Shapiro’s request that this Court assume that the SIM swap must have led logically and foreseeably to the theft is unfounded." The filing also refutes the plaintiff's claim of "intentional misconduct" for disclosing information, like a Social Security number and exchange passwords, that AT&T says it would never have ever had in its possession.

The firm's lawyers also highlight that Shapiro has not said whether his phone was used for any two-factor authentication mechanisms on his exchange accounts.

"Mr. Shapiro blames AT&T for the theft, but he is wrong, and his complaint states no viable claim against AT&T under any theory," December's filing reads. The complaint "overreaches at every turn to blame AT&T for conduct that it did not control" and the lawyers suggest "Mr. Shapiro's own negligence" could be to blame for the hack.

AT&T further states in the latest filing that, in his opposition to the motion to dismiss, Shapiro "ignores critical holes in his allegations" and is requiring the court to make "wild guesses."

Shapiro's opposition to the motion to dismiss, filed in early January, states: "Unable to deny its involvement in these criminal acts, AT&T marshals a host of red herring, whataboutism inquiries to make it appear as though the theft of Mr. Shapiro’s funds was utterly unforeseeable and unrelated to the SIM swap."

AT&T faces a similar case brought by crypto investor Michael Terpin in 2018, who claimed he lost $24 million in a similar SIM-swap hack. A Los Angeles court said in a ruling last summer the telecom company must answer the lawsuit.

In the case of Shapiro, the court will hear AT&T's motion for dismissal in the Central District of California, Western Division, Los Angeles on Feb. 18.

The leader of the hacking group responsible for Shapiro's loss, 21-year-old Joel Oritz, was sentenced to 10 years in federal prison after pleading no contest to charges of orchestrating 13 SIM swaps in April 2019.

See the full document below:

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.