📊 Crypto payments platform Bitrefill disclosed that it suffered a cyberattack on March 1, 2026, suspected to be linked to the North Korean Lazarus Group / Bluenoroff. The breach originated from a compromised employee device and leaked credentials, allowing attackers to access parts of its database and hot wallets, transferring funds. About 18,500 order records were accessed, involving email addresses and crypto addresses. Bitrefill stated that it does not store full KYC data, operations have largely resumed, and the losses will be borne by the company.