Bittrex Flops with Sensitive Data

World renown crypto trading platform accidentally shares KYC documents of a user via email with another user.

An individual seeking to obtain KYC verification with Bittrex has posted on a Russian Telegram channel claiming to have been sent passport documentation and other sensitive data uploaded by other users completing KYC requirements.

The poster claims to have received the data in an email sent by the exchange stating that his KYC verification had been rejected. Alongside his own passport data, the data of a number of users was also forwarded to him.

The user wrote “Do you want to see something insane? Bittrex mixed up its manual user verification of accounts. Right now, I am seeing the passport of one Nourbek, and his selfie,” alongside a screenshot of the email forwarded to him.

The exchange has responded to the indicident, stating “Bittrex takes user privacy very seriously. We quickly moved to address this isolated incident in which a small handful of user documents were inadvertently merged together into one support ticket.

Bittrex took steps to ensure that the erroneous documents were removed from being viewable within the support site, and we plan to reach out to the affected users and offer to pay for identity theft protection for 2 years.”