Some Celsius creditor data was leaked in a phishing attack on Stretto last week

On April 28, Celsius said on the X platform that it has sent a notice to the court regarding the data security incident reported by Celsius claims agent Stretto. According to court documents it shared, on April 17, 2024, Stretto discovered that certain Celsius creditor data held by Stretto had been accessed by unauthorized users following a phishing attack. Stretto terminated all unauthorized access to the affected accounts on the same day. Stretto has engaged an independent computer forensics firm to conduct an investigation to determine the severity of this data security incident. The investigation is ongoing, but as of now, Stretto has determined that the information accessed includes creditor names, email addresses, mailing addresses, and the amount claimed.