Blockchain identity platform Fractal ID suffers data breach

ChainCatcher news, the blockchain identity platform Fractal ID announced that on July 14, 2024, one of its engineers detected a potential data breach in the Fractal ID system. An unauthorized third party accessed an operator's account and ran an API script to access users' personal data. The Fractal ID team noticed the attack and took measures to log the attacker out of the system.

The attacker gained access to data from approximately 0.5% of the Fractal ID user base. The potentially affected information includes details from Fractal ID user profiles, which may include names, email addresses, wallet addresses, phone numbers, physical addresses, as well as images and photos of uploaded documents.

Fractal ID immediately took steps to mitigate the impact of this breach and implemented additional security measures, and also contacted relevant data protection authorities and cybercrime police departments. The breach was contained within the Fractal ID environment and did not affect any customer systems or products using its services.