Bitcoin Exploit Drains Millions Exposes Data

Bitrefill Cyberattack Exposes Customer Data and Drains Funds

• Bitrefill experienced a cyberattack on March 1, linked to the Lazarus Group, compromising company funds and customer data.
• The breach involved accessing an employee’s device to extract credentials, leading to database and crypto wallet infiltration.
• Approximately 18,500 purchase records were exposed, including email addresses and crypto payment details.
• Investigators identified similarities with previous attacks by the Lazarus Group and its affiliate Bluenoroff.
• Bitrefill plans to cover financial losses using operational capital and has restored platform functions post-incident.

The cyberattack on Bitrefill compromised around 18,500 purchase records and was linked to the notorious Lazarus Group. The platform has since restored operations while planning to absorb the financial impact internally.