Hackers extort French crypto tax platform after stealing 50,000 user records

Source: Yellow Original Title: Hackers extort French crypto tax platform after stealing 50,000 user records

Original Link: The French cryptocurrency tax platform Waltio revealed a data breach affecting approximately 50,000 users after hackers demanded a ransom.

The Shiny Hunters group obtained customer emails and 2024 tax report data in the attack.

Waltio CEO Pierre Morizot stated on Friday that the breach occurred on January 21 through what the company described as a “particularly sophisticated attack.” The platform offers portfolio tracking and tax calculation services for cryptocurrency holders.

The Paris Prosecutor’s Cybercrime Division is investigating the incident. Waltio filed reports for attempted extortion and unauthorized access to automated data processing systems.

What was compromised

Hackers obtained user email addresses and capital gains and losses data from the 2024 tax reports. The company confirmed that passwords and other sensitive credentials were not accessed.

Morizot warned that the main risk involves social engineering attacks. Cybercriminals could use details from the tax reports to impersonate authorities or the platform itself when attacking victims.

“Some attackers may use contextual elements to appear credible,” Morizot said in a statement.

Why physical attacks matter

France has experienced multiple violent “wrench attacks” targeting cryptocurrency holders. Criminals use stolen personal data to identify and physically threaten victims to force them to transfer their digital assets.

There were four kidnapping attempts over four days in early January across France. These types of attacks typically involve armed intruders forcing victims to hand over cryptocurrency access codes under threat of violence.

The Waltio breach provides criminals with verified information identifying French residents holding crypto positions subject to taxation. Tax compliance data creates high-value targets compared to typical exchange leaks.

Members of Shiny Hunters have previously been detained in France, but the group continues its operations under the same name.