French crypto tax platform Waltio is currently facing a data extortion threat from the hacking collective ShinyHunters, which claims to have stolen personal information belonging to approximately 50,000 users. While the group is threatening to release 2024 tax reports, Waltio maintains that its core production systems remain secure and that no private financial credentials or crypto keys were accessed.
The incident began when ShinyHunters, a group with a long history of targeting major corporate and digital asset entities, announced they had breached the platform. The hackers are demanding a ransom payment to prevent the public leak of sensitive user documents. This group has built a reputation for high-profile cyberattacks, having previously targeted massive organizations across various sectors and demanding significant cryptocurrency payments to keep stolen data private.
In response to the claims, Waltio issued a statement to reassure its client base regarding the integrity of its infrastructure. The company emphasized that the breach did not affect its primary services or the security of its production environment. Crucially, they noted that the hackers did not gain access to banking details or the private keys necessary to reach users' cryptocurrency holdings, which are the primary concerns for most investors.
Despite these reassurances, the company is taking the threat seriously and has engaged with law enforcement to address the criminal activity. Waltio officially filed a complaint with the French cybercrime unit to initiate a formal investigation into the breach. This move highlights the increasing pressure on fintech and crypto-related firms to bolster their defenses against sophisticated international extortion groups that specifically hunt for financial data.
The group behind the attack, ShinyHunters, has a documented history of aggressive and successful data theft operations. Past reports indicate they were responsible for extorting AT&T for several bitcoins and were involved in a massive data threat against Ticketmaster. Their portfolio of targets also includes significant crypto exchanges in India, suggesting a calculated pattern of attacking hubs where high volumes of personal and financial information are stored.
As the situation develops, the focus remains on whether the hackers actually possess the volume of data they claim and how Waltio will manage the potential privacy implications for its users. This event serves as a stark reminder of the persistent security challenges facing the crypto industry as it matures. The clash between Waltio and ShinyHunters is just the latest example of the ongoing struggle between digital asset platforms and the cybercriminals who view them as lucrative targets.
Source: France Waltio Faces Ransom Threat From Notorious Hacker Collective



Strong piece on the Waltio breach. ShinyHunters going after crypto tax platforms is kinda brilliant from a criminal perspective sicne users there already had crypto gains to report. The intersting part is how theseguys keep hitting payment systems and fintech repeatedly instead of spreading out.