In an email to clients and a letter posted on the company's website on Wednesday, Unchained Capital CEO Joe Kelly said that the external electronic Email marketing provider Active Campaign (AC) said it suffered a social engineering attack last week. Unchained Capital is a Bitcoin-only financial services provider.
-
Kelly said that because the attack occurred on the AC platform, the information shared with AC (client email address, username, account status, whether the client has an active multisig vault, Unchained Capital, etc.) It was pointed out that only whether you own the loan (and perhaps your IP address) could have been exported. without permission.
-
None of Unchained's systems were compromised, Kelly said, meaning no client profile information not shared with AC was compromised. This includes address, social security number, date of birth, ID, phone number, bank account number, password, Bitcoin (BTC) address, Bitcoin balance, loan balance, trading activity, vault statement, and loan statement. Contains data such as.
-
Kelly added that while clients' Bitcoin storage is protected by multisig cold storage, clients still need to be aware of what happened and be wary of phishing attacks.
-
“We take our clients' privacy very seriously and deeply regret that an incident like this occurred,” Kelly concluded. “We would like to emphasize the fact that due to our joint custody model, such incidents will never put our customers' funds at risk.”
