Massive Cyberattack Hits Bitrefill: 18,500 Customers at Risk!

Bitrefill Hit by Cyberattack, 18,500 Records Exposed

On March 1, 2026, Bitrefill, a platform for making payments with cryptocurrency, experienced a cyberattack. The attack may be connected to the Lazarus Group, a hacking organization believed to be based in North Korea. Approximately 18,500 customer order records were accessed, including email addresses and cryptocurrency addresses. The attackers initially gained access through a compromised employee device and stolen login information. They then accessed portions of Bitrefill’s database and some cryptocurrency wallets, and were able to transfer funds before the breach was stopped.

Read More

2026-03-18 12:10