Crypto exchange Crypto.com has denied that it kept a 2023 data leak of user details a secret from authorities. 

Bloomberg reported on Friday that Noah Urban, a member of the hacking group Scattered Spider, said the group had phished their way into gaining access to a Crypto.com employee’s account sometime before early 2023, which exposed the personal information of some users. 

Blockchain investigator ZachXBT then claimed on X that Crypto.com “covered up a breach that impacted the personal information of your users,” adding that Crypto.com had been “breached several times.”

Bloomberg’s report saw some crypto pundits criticize Crypto.com, arguing it should have been more publicly transparent amid heightened anxiety over user data leaks after major exchange Coinbase was exploited for customer information earlier this year.

However, a Crypto.com spokesperson told Cointelegraph that the company made a “Notice of Data Security incident filing” in the US-based Nationwide Multistate Licensing System and in “additional reports with the relevant jurisdictional regulators.”

Crypto.com says hack impact was “limited”

The spokesperson said the company “detected a phishing campaign that targeted one of our employees in 2023.”