Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Detection and Response: The company detects and responds to cybersecurity incidents through an incident response plan activated with yes, and law enforcement notified with yes (paris prosecutor’s cybercrime unit, france’s national cyber unit), and communication strategy with security notice issued to users, cnil notified, warnings about impersonation scams, and law enforcement notified with yes (french authorities)..

Common Attack Types: The most common types of attacks the company has faced is Breach.

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personal data (emails, tax report summaries, potentially names and phone numbers) and Personal information.

Incident Response Plan: The company's incident response plan is described as Yes.

Ensuring Regulatory Compliance: The company ensures compliance with regulatory requirements through Criminal complaint filed for unauthorized system access and attempted extortion.

Key Lessons Learned: The key lessons learned from past incidents are Risks faced by crypto tax platforms handling sensitive transaction data under international reporting requirements; importance of verifying security codes in official communications to prevent impersonation scams.Increased scrutiny of crypto tax platforms due to new EU regulations (DAC-8) requiring detailed reporting of users' crypto holdings, making them attractive targets for cybercriminals.

Implemented Recommendations: The company has implemented the following recommendations to improve cybersecurity: Enhanced monitoring for unauthorized access, user education on impersonation scams and and stricter data collection policies to avoid storing unnecessary personal information..

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Brinztech, and Source: Waltio Security NoticeDate Accessed: 2026-01-23, and Source: Paris Prosecutor’s Office, and Source: Cyber incident report.

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Security notice issued to users, CNIL notified and warnings about impersonation scams.

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were French authorities warned about criminals impersonating law enforcement to target victims; advised users to verify security codes in official communications., Waltio advised users to verify security codes in official communications and be cautious of impersonation scams. and Authorities warn of risks including 'wrench attacks' (extortion or physical coercion) and potential connections to other recent attacks on crypto holders..

Last Ransom Demanded: The amount of the last ransom demanded was Yes (attempted monetization through ransom demand).

Last Attacking Group: The attacking group in the last incident was an Shiny Hunters.

Most Recent Incident Detected: The most recent incident detected was on 2025-12-24.

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2026-01-23.

Most Significant Data Compromised: The most significant data compromised in an incident were Emails, tax report summaries (potentially names and phone numbers), Personal information of approximately 50 and000 users.

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Personal information of approximately 50,000 users, Emails and tax report summaries (potentially names and phone numbers).

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 50.5K.

Highest Ransom Demanded: The highest ransom demanded in a ransomware incident was Yes (attempted monetization through ransom demand).

Most Significant Legal Action: The most significant legal action taken for a regulatory violation was Criminal complaint filed for unauthorized system access and attempted extortion.

Most Significant Lesson Learned: The most significant lesson learned from past incidents was Risks faced by crypto tax platforms handling sensitive transaction data under international reporting requirements; importance of verifying security codes in official communications to prevent impersonation scams., Increased scrutiny of crypto tax platforms due to new EU regulations (DAC-8) requiring detailed reporting of users' crypto holdings, making them attractive targets for cybercriminals.

Most Significant Recommendation Implemented: The most significant recommendation implemented to improve cybersecurity was Enhanced monitoring for unauthorized access, user education on impersonation scams and and stricter data collection policies to avoid storing unnecessary personal information..

Most Recent Source: The most recent source of information about an incident are Waltio Security Notice, Paris Prosecutor’s Office, Cyber incident report and Brinztech.

Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing.

Most Recent Stakeholder Advisory: The most recent stakeholder advisory issued was French authorities warned about criminals impersonating law enforcement to target victims; advised users to verify security codes in official communications., Authorities warn of risks including 'wrench attacks' (extortion or physical coercion) and potential connections to other recent attacks on crypto holders., .

Most Recent Customer Advisory: The most recent customer advisory issued was an Waltio advised users to verify security codes in official communications and be cautious of impersonation scams.