Topic: 4500 personal data leaked by TokenSoft (Read 223 times)

Does anyone know the number of users (active users,) and is this 4,500 the real percentage, or is it an estimate, and what permissions does that member seek to access compared to the total number of users?

In general, the number is not large, so the motive is likely to be financial, and we may hear new leaks if those were a VIP people.

And again we get to see how one bad individual or a group of such destroys the reputation of a company and leaks customer data because of their stupidity, misuse, or lack of intelligence. I guess that's what you get when your business model is employing the cheapest possible workforce instead of those best suited to work on any open position. You surround yourself with people without morals and ulterior motives, incapable from seeing right from wrong.

Well to be fair to that topic, that project wasn't about security as in net security, but securities as a financial asset (most likely either synthetic stocks or derivatives). So they are very different things.
But obviously failing on this level doesn't really promise brigt future for them. Not that they would have it without messing this up. I wouldn't touch on that launchpad with a ten foot stick, who know if the same person coded their smart contracts.

I've seen at least two community managers who have terrible personalities when dealing with complaints from the community. It might be because the hiring itself doesn't have a high requirement since they can hire remote workers to do the job with little to no supervision and cause disaster to both the companies and the community. This is the third time. Even if those people do cheat, doing their phone numbers are definitely too much. Hopefully, he stop his power trip soon or he needs to look for jobs in a different field.

I'll consider those ideas and suggestions. Thanks.
For the meantime, I'm using a different phone number but still using the old one ^{(dual-sim smartphones)} just being cautious of answering phone calls or wont answering at all, unless it made an sms to confirm their needs/wants.

I wrote to you how I solved it, and when you answer an unknown number, you don't have to talk to the person on the other end because that person should introduce himself to you and say what he wants, and then you simply end the call and add the number to the black list. It is true that they have many different numbers from which they call, but it is also true that they do not have so many numbers that they can call you from a different number every day.

If this is such a problem for you, listen to the advice and change the number, just be sure that the new number is not listed in the public telephone directory, because as far as I understand, those databases are widely used for this type of sales.

I think that's a small inconvenience for the benefit of not having scammers knowing your full name, address, and phone number. It isn't just spam calls and the like, but also things like a SIM swap attack. It takes 2 minutes to send a mass SMS to all your contacts with your new number, and you can update your number on websites and businesses the next time you use them. Keep your old number active for 6 months and redirect any legitimate contact to your new number.

In the future you can also consider using a burner phone number which you throw away and replace every 3/6/12 months or whatever. If you need a phone number to sign up to something, but don't want to hand out your real one, use this one instead.

With the help of google messages app, yes. Sms with the same pattern like related to crypto, giveaways, gambling, inviting jobs eventually marked as a spam.

But for calls, i need to answer them first before i can tell if its a legit call or not. Since my fist language is not english, talking to an english person in phone calls with crypto related talks gives me creepy vibes. Coz i never shared crypto related topics in any phone calls even to my friends worst to a foreign guy. I once answered an english with something chinese accent and sometimes british.
One of the problems is some of the business/finance related companies i applied for like credit cards doesn't have particular number like they have multiple numbers used when calling their clients and because of these creepy feeling i experienced, calls from unsaved numbers brings back those memories, so i missed lots of calls even the legit ones.

That's my last option though, maybe when sim registration law takes place in my area (in 3-6 months i guess). But for now, i can't because it will take time to let those businesses, acquaintances of mine to know my new number and i hate messaging them just to let them know, and i really hate that part. That's why this mobile number of mine is like more or less 10 years already to me. Lol.

More to the point, where are the security checks and controls? Why can one staff member simply access, download, and share a database of KYC information without requiring additional permissions from anyone else? Pretty basic stuff, especially for a supposedly security focused company. Just another great example of how pretty much every centralized company in this sector is amateurish, at best.

I don't have any hard data on this, but my feeling is that people who chase worthless tokes and airdrops have far less solid security practices when compared to the average bitcoin user. It's probably quite easy to trick these people in to entering the seed phrase on a website as part of some scam airdrop or similar.

Why not change your phone number?

At least it's easy to block calls from a certain number, I simply add such numbers to the blacklist and they can no longer call or send me messages, and if someone calls me from countries where I have no relatives or friends, I simply block the entire country by area code. With this blocking method, I reduced unwanted calls and messages by 99%.

---

What I wanted to say is that those who deal with airdrops of various tokens are mostly not those who could have valuable crypto assets, although there are always exceptions. In any case, it is never good when such data is made public, and as @PX-Z already wrote, for some, this biggest data leak turned into a nightmare, which unfortunately still continues.

Ugh, i still experience the aftermath of this. Day by day spam emails, spam sms, worst are calls from random foreign guy in a company asking my opinion regarding crypto like shit here we go again. That's why i become paranoid of phone calls from a unknown numbers, affecting those legit calls.

Airdrops, tokens and similar things and their users are certainly not valuable targets (with rare exceptions), so I don't see this leak as a big danger for anyone, except maybe in the short term for the reputation of the company, which obviously has problems choosing the right people for the job.

A well-known company that produces hardware wallets was hacked at one time and hundreds of thousands of their users' data was leaked, and who still mentions that today?

TokenSoft, a leading technology and security platform for companies seeking to issue assets on the blockchain, at scale, and within compliance, unfortunately, leaked or doxxed 4500 users.


https://www.securities.io/digital-securities-launchpad-tokensoft-doxxes-4500-users/

It's just ironic that a supposedly tech leading company preaching security has it's on slip on this industry and this is why personal and sensitive data should be protected by this companies. Not the first though, but for sure, if someone gets a copy of this information, it could be used as fraud, or spam our emails again with offers that can be a trap for scammers. So watch out, many in the next couple of months we will hear attempts to used this data by cyber criminals.