Kroll: the company that say they can Hack the Hackers got “Sim swap” hacked.

Kroll are the “Risk and Financial Advisory” specialists (sic). That work for BlockFi in its death throes.

These “Security Experts” got sim swapped and lost a bunch of customer data. The message BlockFi sent out is below.

What happened? It appears that on or about Saturday, August 19, 2023, an attacker conducted a SIM swapping attack against T-Mobile US and gained control of a mobile phone number belonging to an employee of Kroll Restructuring Administration LLC (“Kroll”), the Claims Agent for the BlockFi bankruptcy proceeding. As a result, the attacker appears to have accessed files stored online in Kroll’s cloud-based systems, including files that contained information about BlockFi claimants. When Kroll became aware of the incident, it acted quickly to secure the Kroll employee account and launched an investigation. This attack on T-Mobile and Kroll did not affect any BlockFi systems or BlockFi digital assets.

What information was involved? The files involved in the incident may have contained the following information related to you:

Information related to your scheduled claim, which we received from BlockFi in accordance with bankruptcy noticing rules requiring companies in bankruptcy to notify potential creditors about important information related to their bankruptcy proceedings. The files involved in the incident appear to have included the following information about you, as it would have appeared in BlockFi’s books and records: name; email address; BlockFi Client ID; the types and amounts of cryptocurrency held by BlockFi; the type and amount of your scheduled claim; and other information relating to your scheduled claim, such as the unique ID assigned by Kroll.