Bitrefill Cyberattack Linked to North Korea’s Lazarus Group, Exposes 18,500 Customer Records

TLDR: Bitrefill’s March 2026 breach was linked to North Korea’s Lazarus Group based on malware and IP patterns. Attackers used a stolen legacy credential from an employee laptop to access production infrastructure.  Around 18,500 purchase records were accessed, exposing emails, crypto addresses, and IP metadata. Bitrefill confirmed it remains financially stable, absorbing all losses through [...]

The post Bitrefill Cyberattack Linked to North Korea’s Lazarus Group, Exposes 18,500 Customer Records appeared first on Blockonomi.