Crypto.com Breach Exposed: Scattered Spider Hits User Data

Paul

- Security breach by hacking group "Scattered Spider" exposed user data.
- Exchange faces criticism over lack of transparency and concealing the incident.
On September 21, 2025, Bloomberg reported that major cryptocurrency exchange Crypto.com suffered a security breach before March 2023, orchestrated by the cybercriminal group "Scattered Spider." The group reportedly used advanced social engineering techniques to target an employee account and infiltrate the company's internal systems, compromising the personal data of a small number of users. However, Crypto.com assured customers that the incident did not affect any funds.
The investigation identified Noah Urban, a teenage member of the Scattered Spider group, as a principal actor. Urban and his associates used deceptive tactics to access sensitive company systems. Despite this, Crypto.com emphasized that the breach impacted a minimal number of accounts.
The company faced criticism for its lack of transparency in handling the incident. Blockchain investigator ZachXBT accused Crypto.com of failing to inform affected users, calling the company’s approach evasive. ZachXBT also highlighted other controversies involving Crypto.com, including the reissue of 70 billion CRO tokens in March and the alleged concealment of a separate security lapse in August.
This revelation comes as Crypto.com pushes for aggressive market expansion. In August, the exchange announced a partnership with Trump Media & Technology Group (TMTG), the parent firm of Truth Social. The collaboration aims to integrate Crypto.com’s native CRO token into TMTG platforms and develop new cryptocurrency investment offerings. The partnership involves significant financial exchanges: Trump Media will purchase $105 million in CRO tokens, and Crypto.com will invest $50 million in TMTG stock. Meanwhile, reports suggest Crypto.com is also exploring an Initial Public Offering (IPO).
According to CoinMarketCap, the Cronos (CRO) token was trading at $0.218 as of September 21 at 23:09 UTC, reflecting a 5.41% decline in its 24-hour trading volume.
Get the latest news in your inbox!