The hackers have stolen nearly 50,000 email addresses from the Canada-based crypto exchange platform, Queen Square. Now, they hope to use data to carry out SIM swap attacks.

One of the alleged intruders involved in the attack spoke to Weiss Motherboard on June 2, stating that the group was originally looking to sell the information, but realized that it could Make more money by switching your SIM card with accounts.

SIM card swap method

The SIM card swap consists of a penetration of the target's mobile phone number, giving them the ability to request a password reset for any website where the victim's phone is used for two-factor authentication.

The aforementioned maneuver is frequently used to steal cryptocurrencies, and can pose a risk to millions of Bitcoin (BTC), Ethereum (ETH) and other cryptocurrencies stored in platforms Save.

Weiss Motherboard states that the information obtained includes phone numbers and physical addresses. It also includes data about the amount each user deposited into their account in the first six months, and the customer's high-value customer rating within the Queen Square platform.

The hack occurred through an employee stealing the information

Stacey Hoysack, General Counsel for Queen Square, provided more details about the attack on Weiss Motherboard, noting that it had occurred in 2019.

He continued, saying: The data was obtained as a result of the employee stealing the information contained in the customer relationship database used for exploration.

Hoysack says the company has replaced internal sales management services, rewritten the data management policy, and raised its internal controls in an attempt to avoid any additional staff theft.