TechFlow news — The Celsius social platform has announced it has notified the court of a data security incident related to Stretto, claims agent for Celsius. According to court documents shared, on April 17, 2024, Stretto discovered that certain creditor data belonging to Celsius had been accessed by unauthorized users following a phishing attack. On the same day, Stretto terminated all unauthorized access to the affected accounts. Stretto has engaged an independent computer forensics firm to investigate and assess the scope of the data security incident. The investigation is ongoing, but to date, Stretto has confirmed that the accessed information includes creditors’ names, email addresses, mailing addresses, and claim amounts.
In addition, tax identification numbers provided by fewer than 40 creditors to Stretto were also accessed. Based on the current investigation, this data security incident does not appear to have impacted Stretto’s systems related to distributions under the plan, or the data provided by Celsius to Stretto during the bankruptcy proceedings. Stretto’s independent investigation continues, and further updates will be provided as appropriate.
A statement released by the Celsius debtors regarding this data security incident reads: “Given Stretto’s role in the distribution process under this plan, out of an abundance of caution, the debtors have temporarily paused distributions to creditors under the plan effective immediately. We expect to confirm key findings from the investigation next week, enabling us to promptly resume distributions under the plan as soon as it is safe and secure to do so. For affected creditors, Stretto recommends closely monitoring their accounts and transactions, and reporting any unusual or suspicious activity immediately to Stretto or relevant law enforcement authorities.”
