One of the alleged intruders involved in the attack spoke to Weiss Motherboard on June 2, stating that the group was originally looking to sell the information, but realized that it could Make more money by switching your SIM card with accounts.
SIM card swap method
The SIM card swap consists of a penetration of the target's mobile phone number, giving them the ability to request a password reset for any website where the victim's phone is used for two-factor authentication.
The aforementioned maneuver is frequently used to steal cryptocurrencies, and can pose a risk to millions of Bitcoin (BTC), Ethereum (ETH) and other cryptocurrencies stored in platforms Save.
Weiss Motherboard states that the information obtained includes phone numbers and physical addresses. It also includes data about the amount each user deposited into their account in the first six months, and the customer's high-value customer rating within the Queen Square platform.
The hack occurred through an employee stealing the information
Stacey Hoysack, General Counsel for Queen Square, provided more details about the attack on Weiss Motherboard, noting that it had occurred in 2019.
He continued, saying: The data was obtained as a result of the employee stealing the information contained in the customer relationship database used for exploration.
Hoysack says the company has replaced internal sales management services, rewritten the data management policy, and raised its internal controls in an attempt to avoid any additional staff theft.