Some Celsius creditor data was leaked in a phishing attack on Stretto last week

ChainCatcher news, Celsius stated on social media that it has notified the court regarding a data security incident reported by Celsius claims agent Stretto. According to court documents, on April 17, 2024, Stretto discovered that certain Celsius creditor data held by Stretto was accessed by unauthorized users following a phishing attack. Stretto terminated all unauthorized access to the affected accounts on the same day. Stretto has hired an independent computer forensics company to conduct an investigation to determine the severity of the data security incident. The investigation is ongoing, but as of now, Stretto has identified that the accessed information includes creditor names, email addresses, mailing addresses, and claim amounts.

The statement released by Celsius debtors regarding this data security incident states: "Given the role Stretto plays in the distribution process under this plan, out of an abundance of caution, the debtors have temporarily suspended distributions to creditors under this plan. We hope to confirm the main findings of the investigation next week so that we can immediately resume distributions under the plan in a safe and secure manner."