TL;DR

An unkown Bitcoin exchange got hacked and my mobile phone number was obtained by scammers, who spoofed a police phone number and tried to call me to steal from me. The site in question did not notify me of the breach and I want to find out which one it is.

The story

Today I missed a call on my mobile from a number that showed as 2 253 33 33, a quick Internet search turned up the police of Vilvoorde (far from my home). I thought it strange already that it was missing the normal 0 prefix, but after adding it I managed to call them back.

After I while I got a friendly lady on the line who explained that they had multiple reports of their number being spoofed by scammers to call people who bought Bitcoin on a site, she couldn't tell me which site that was.

She went on to tell me the site in question was hacked in so far that the scammers obtained at least detailed customer records including but not limited to name and phone number.

Now I'm always very reluctant to give out my phonenumber and even more so my mobile number on any site where I purchase things. But for exchanges, your mobile number often is a requirement, and given that it relates to security I know I entered it on some sites, and the total number of sites I did that on is 3 (a 4th as it because they bought one of those 3).

The interesting bit now is that none of those sites notified me as a customer that there had been a breach and that my data has been stolen. None of those sites publicly made any statements that such a thing happened.

So, I'm going to make this public and I will try to find out which site got hacked. FYI, none of them hold any funds for me.

Do you know which site might have messed up, get in touch on bitcoinhack@vansanden.be or join my SimpleX group for this topic.