Coincheck Customers Fall Victim to Data Breach After Domain Account Error

Coincheck's .com domain had been "in a state where it could be acquired." No funds have been lost, the firm said.

Jun 3, 2020 at 1:09 p.m. UTC
Updated Sep 14, 2021 at 8:47 a.m. UTC

Coincheck has fallen victim to a data breach after attackers accessed one of its domain name accounts and used it to impersonate the cryptocurrency exchange.

The Japanese firm – which fell victim to possibly the largest crypto hack in history in 2018 – said Tuesday that an unknown third party gained access to an account it held with domain registration service Onamae.com. An incident notice suggested the attackers then used its .jp domain account to send "fraudulent" emails to customers.

"A third party who made unauthorized access (hereinafter, a third party) fraudulently sent some emails from our customers during the period from May 31 to June 1, 2020," reads the report. "It turned out that [the domain name] was in a state where it could be acquired."

Around 200 customers who sent replies to emails from the attackers are said to have data exposed. Coincheck said personal identifying information such as names, addresses and ID photos may have been illegally obtained. It's possible that hackers were phishing for "know your customer" verification details so they could access client accounts, but the motive remains unclear.

How the third parties were allowed to gain access to Coincheck's domain account is currently being investigated by the registration firm, Coincheck said.

Although the exchange said funds had not been lost in the attack, it has suspended crypto remittances until Onamae's investigation is complete. All other services, including fiat deposits and withdrawals as well as cryptocurrency trading, remain operational at this time.

For customers seeking support, the firm is requesting that emails are sent to an address at coincheck.jp, not coincheck.com for the time being.

CoinDesk approached Coincheck for more precise details on the breach, but hadn't received a response by press time.

The Festival for the Decentralized World
Thursday - Sunday, June 9-12, 2022
Austin, Texas
Save a Seat Now

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

Trending

1
CoinDesk - Unknown
After Armstrong Tweet, India's Crypto Policy Body Says No Contempt of Court Challenge vs. RBI

The Coinbase CEO last month suggested the RBI's "shadow ban" of crypto exchanges violated a Supreme Court ruling.

The Coinbase CEO last month suggested the RBI's "shadow ban" of crypto exchanges violated a Supreme Court ruling.

CoinDesk - Unknown
2
CoinDesk - Unknown
Portuguese Congress Rejects Two Bills Seeking to Tax Crypto

The proposals were submitted by two leftist parties. The government, which also seeks to apply taxes, hasn’t submitted a proposal so far.

The proposals were submitted by two leftist parties. The government, which also seeks to apply taxes, hasn’t submitted a proposal so far.

CoinDesk - Unknown
3
CoinDesk - Unknown
First Mover Asia: Regulatory Attention on Terra Could Change South Korean Trading Environment; Bitcoin Goes Sideways

The founders of two prominent crypto-related organizations said tightened restrictions could make it difficult for foreign tokens to list on Korean exchanges, discouraging projects from trying.

The founders of two prominent crypto-related organizations said tightened restrictions could make it difficult for foreign tokens to list on Korean exchanges, discouraging projects from trying.

CoinDesk - Unknown
4
CoinDesk - Unknown
A16z Doubles Down on Crypto Investments Despite Market Downturn, and NFL Launches Play-to-Earn NFT Game

The most valuable crypto stories for Wednesday, May 25, 2022.

The most valuable crypto stories for Wednesday, May 25, 2022.

CoinDesk - Unknown