Lists containing participant data from major crypto conferences have surfaced online. Cointelegraph obtained such lists from vendors in Telegram. The leaked information includes names, contact details, nationality, job titles, companies, and links to personal and professional social media profiles.
What’s Known
It’s reported that in some instances, the leak includes ticket purchase dates, the operating systems used, crypto wallets, and even messages sent to event organizers.
Information collected from registration forms can be especially valuable to scammers. This is particularly true for conferences where sign-ups occurred through platforms like lu.ma, which frequently require linking social media accounts.
Geographic Scope of Those Affected
According to Cointelegraph, the data sellers operate in an organized manner and claim to have access to global databases. The lists analyzed include information on participants from Southeast Asia and India, attending conferences in autumn 2024.
One of the largest lists involves 1,700 participants of the AIBC conference in Malta in November. Initially, the database was priced at $4,000 but dropped to $650 after a few days.
How the Data Was Sold
The sellers stated that these data sets are not breaches but could be used for marketing. However, experts note that such databases facilitate phishing and social engineering attacks.
They also mentioned that the information is sold exclusively and only to a few buyers. To prove its authenticity, they offered to look up any conference attendee by name and surname.
The fact that the lists come from different countries and conferences suggests the presence of an organized network. Cointelegraph reports that the data sellers and compilers could be from Russia or Russian-speaking regions: analysis of the text, along with tabs in Russian, appears to confirm this.
Meanwhile, AIBC organizer Eman Pulis stated that the conference adheres to strict data protection protocols. He noted that counterfeit databases are often sold on the market. The authenticity of this leak remains unverified.
If confirmed, attendees whose data may have been compromised could be at risk of fraud.