In brief
- Bitrefill was hit by a March 1 cyberattack that escalated from a compromised laptop to database and wallet access, with evidence pointing to North Korean hacking groups Lazarus and Bluenoroff.
- About 18,500 purchase records were partially exposed; no full database exfiltration occurred, and affected users were notified directly.
- Most operations have been restored, losses will be covered by operational capital, and Bitrefill is tightening security measures going forward.
Bitrefill, a platform that lets users exchange cryptocurrency for gift cards and phone service credit, disclosed Tuesday that it was targeted in a March 1 cyberattack.
According to the firm, it began with a compromised employee laptop, then expanded into broader…
