Ongoing data breach case at a compliant platform: first suspect arrested, $300 million compensation cost warns the industry

【CryptoWorld】A compliant platform has experienced a severe data breach that continues to unfold. On December 29, Indian police arrested a former customer service staff member of the platform, marking the first confirmed arrest in this case.

The root cause points to internal corruption. Investigations reveal that hackers bribed overseas customer service personnel to gain system access, enabling them to steal user privacy on a large scale. The leaked data of 69,461 users includes names, addresses, phone numbers, emails, and even government-issued IDs—enough for identity theft or further scams.

Ransom negotiations ended in failure. The attackers initially demanded $20 million, which the platform decisively refused. Instead, they set up a reward program offering an equivalent bounty to track down the masterminds behind the attack. While this firm stance demonstrates resolve, it also indicates that the severity of the issue exceeds expectations.

The financial cost is staggering. Second-quarter financial reports show that this incident has resulted in $307 million in expenses—covering victim compensation, legal fees, and security infrastructure upgrades. Additionally, a class-action lawsuit has been filed against the platform, accusing it of failing to disclose the risks in a timely manner, leading to investor losses.

This incident serves as a warning to exchange operations: security management of customer service staff and risk control of overseas teams—often overlooked—are actually the weakest links in the security defense. International law enforcement agencies are still deepening their investigations, and industry experts expect more arrests to follow.