Mt. Gox Hackers Claim to Release Transaction Details, CEO's Personal Data

Someone has supposedly released a dump of Mt. Gox trade data and proprietary tools, including Mark Karpeles' personal data.

AccessTimeIconMar 9, 2014 at 11:08 p.m. UTC
Updated Sep 11, 2021 at 10:31 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

UPDATE (10th March, 8:35 GMT): There is good reason to believe that, while the data files may be genuine Mt. Gox data, .exe and Mac .app files within the dump are bitcoin wallet-stealing trojans. If you have somehow found a link to the files mentioned here, as we warned below, DO NOT OPEN THEM. If for some reason you have, transfer your bitcoins to another wallet immediately. _________________________________________________________________

Hackers (or disgruntled insiders) claim to have released a 700+MB file of Mt. Gox operational information and transaction data, including one sheet claiming the exchange could still have a balance of over 951,116 BTC.

One of the hackers managed to post the data on Gox CEO Mark Karpeles' own blog, then announced the feat on Reddit. Karpeles' site has since gone completely offline and Reddit moderators deleted the original post.

At press time the mods were engaged in a cat and mouse game with other community members who re-posted the original quote and several links claiming to be mirrors of the stolen data.

Revenge

In a profane rant, the original announcement said:

"It's time that MTGOX got the bitcoin communities wrath instead of Bitcoin Community getting Goxed. This release would have been sooner, but in spirit of responsible disclosure and making sure all of ducks were in a row, it took a few days longer than would have liked to verify the data.

Included in this download you will find relevant database dumps, csv exports, specialized tools, and some highlighted summaries compiled from data. Keeping in line with fucking Gox alone, no user database dumps have been included."

"Repost and share this info before it's gone. Lots of people, including us, lost money and coins." Of primary interest to others was a file called 'trades_summary', which purported to show Mt. Gox's balances in all available currencies.

This showed a balance of 951,116.21905382 bitcoins, with an accusation that Karpeles was lying about his company having no bitcoins to return to customers.

Screen Shot 2014-03-10 at 7.39.15 AM
Screen Shot 2014-03-10 at 7.39.15 AM

Many have pointed out that, even if the data is genuine, it could only represent the amount Mt. Gox believed it had in its reserves before shutting down, rather than an actual amount, and is not evidence of actual reserves.

Also included in the dump were a collection of .csv files detailing transactions and trades, Mark Karpeles' own CV and a document containing two separate 'home addresses' of his in Tokyo.

The directories contained several executable files that readers would be well advised not to open on internet connected computers, no matter how many online commenters claimed their authenticity. Supposedly they are Mt. Gox's own proprietary back office tools, though CoinDesk has not verified this and original files could have been altered before being posted on mirror sites.

screenshot

Reddit users claim to have verified the data by examining spreadsheet material and looking up their own account balances.

Forbes reported that another post on the bitcointalk forums (also since deleted) claimed to have 20GB of stolen Gox data on a hard drive that they were willing to sell to cover their bitcoin losses. This supposedly included all user information, including photo ID scans from customer applications.

CoinDesk is monitoring this developing story and will post any new and relevant information if it becomes available.

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.