Waltio Faces Data Breach Affecting 50,000 Users: French Authorities Launch Investigation

French authorities are investigating a significant data breach involving Waltio, a cryptocurrency tax reporting platform utilized by many investors. This breach resulted in hackers accessing sensitive user data and attempting to blackmail the company.

Key Takeaways

French authorities have opened a preliminary investigation into a data breach at Waltio, affecting 50,000 users.
Hackers accessed sensitive personal data and attempted to blackmail the company.
The breach highlights increasing concerns about personal data security in the cryptocurrency industry.
Users are warned to be vigilant against scams and extortion attempts.
Waltio has reassured that banking details and other sensitive data were not compromised, and that their services are still operational.

French Crypto Tax Platform Waltio Hit by 50,000-User Data Breach—Authorities Launch Investigation

The incident raises serious concerns about the risks to personal data in the crypto sector, especially as incidents of fraud and physical assaults against crypto holders have risen sharply in France.

Authorities Connect Waltio Breach to Shiny Hunters' Extortion Attempt

This week, French cybersecurity agencies confirmed that the Paris Public Prosecutor’s Office ordered the National Cyber Unit of the Gendarmerie to investigate the extent of the breach and identify the affected users.

Authorities caution users whose data may have been compromised to remain alert for scammers posing as legitimate service providers or officials, who may attempt to deceive them into relinquishing their digital assets.

Reports indicate that some of the latest fraudsters are impersonating crypto companies, banking anti-fraud units, and even law enforcement personnel.

According to French newspaper Le Parisien, the attack on Waltio is linked to a ransom demand from a hacking group known as Shiny Hunters. This group reportedly gained access to personal information of about 50,000 Waltio users, primarily from France, and claimed to have samples of the stolen information as proof.

Waltio subsequently filed a complaint regarding attempted extortion and unauthorized access to their automated data systems.

The company stated that preliminary investigations revealed that the attackers accessed tax reports from the 2024 period, which contained users’ email addresses, information on crypto profits or losses, and year-end asset balances. Importantly, Waltio clarified that banking information, administrative records, and tax identification data remain secure, and their core systems were not breached.

Waltio has reassured its users that its operations continue unaffected, and client funds are secure.

France Increases Regulation After Crypto Data Breach Amid Rise in Kidnappings

Founded in France and based in Clermont-Ferrand, Waltio caters to roughly 150,000 users, offering streamlined crypto tax compliance for European investors in countries such as France, Spain, and Belgium. The platform collects transaction data from over 700 exchanges, wallets, and blockchains to calculate capital gains, losses, and staking income, generating tax-compliant reports for local filings.

This investigation occurs at a time of intensified focus on crypto-related data leaks in France. Over the past year, law enforcement has linked several home invasions and kidnappings to criminals who are aware of victims’ possession of digital assets.

While the recent data leak has not been explicitly tied to these crimes, investigators have not ruled out the potential use of this data to identify prospective victims.

Fraud victims are urged to retain evidence, report incidents to the police, and contact France's data protection authority if they believe their personal information has not been adequately protected.

It's important to note that the Waltio incident is not isolated; just earlier this month, hardware wallet manufacturer Ledger disclosed a breach involving a third-party payment processor, Global-e, which led to unauthorized exposure of customer data. Last month, crypto tax software firm Koinly also alerted users about a potential email data breach linked to a third-party analytics platform.