Ethereum Co-Founder Vitalik Buterin Calls Privacy “Hygiene” After SitusAMC Cyberattack May Have Exposed JPMorgan, Citi & Morgan Stanley Client Data

The breach at a critical mortgage-servicing vendor shows how vendor compromises can put big banks’ client data at risk. Beyond immediate forensic work, the incident has renewed calls for stronger data-minimization.

More articles

Meghna Chowdhury
Meghna Chowdhury
Meghna is a Journalism graduate with specialisation in Print Journalism. She is currently pursuing a Master's Degree in journalism and mass communication. With over 3.5 years of experience in the Web3 and cryptocurrency space, she is working as a Senior Crypto Journalist for UnoCrypto. She is dedicated to delivering quality journalism and informative insights in her field. Apart from business and finance articles, horror is her favourite genre.

Ethereum co-founder Vitalik Buterin commented on privacy as a “hygiene” practice after a cyberattack on mortgage technology vendor SitusAMC may have exposed client data at major U.S. banks, including JPMorgan, Citi, and Morgan Stanley.

The compromise originated from illegal access to servers at SitusAMC, which announced Saturday that a threat actor had exfiltrated data related to numerous significant financial institutions.

Details on the cyberattack

The organisation stated that the scope, nature, and degree of the breach are still being investigated. Exposed data included “accounting records and legal agreements” as well as “certain data relating to some of our clients’ customers.”

Also Read: BitMEX Blocks Attempted Cyberattack by North Korea’s Lazarus Group Disguised as NFT Partnership Offer on LinkedIn

Buterin made the case that privacy ought to be regarded as fundamental digital “hygiene” rather than as a choice in response to the breach.

“Privacy is not a feature. Privacy is hygiene,” Buterin said in response to a tweet regarding the incident first reported by the New York Times.

Buterin’s statement is consistent with a larger point he has been making this year, which is that privacy should be a fundamental need for digital systems rather than an optional feature.

In an essay published in April, he described how Ethereum may allow stealth addresses, selective disclosure, and application-level zero-knowledge technology in order to lessen the structural data exposure that is present in both public blockchains and traditional banking.

Ethereum and Privacy

Kohaku, a privacy-focused browser wallet and software development kit developed by Nicolas Consigny and Buterin, made its debut at EFDevcon in Argentina last week. The Ethereum Foundation also unveiled a new privacy-focused cluster in October.

The change in emphasis coincides with a renewed focus on privacy across major chains, both as a concept and as a collection of technology designed to uphold it.

Ethereum is creating protocol-level tools in addition to continuing work on new privacy layer-2 chains, Bitcoin is working on Taproot-enabled upgrades and wallet-based solutions, and Solana is coming together around Light Protocol after earlier initiatives like Elusiv failed.

The road ahead

Even well-defended critical infrastructure industries face significant supply-chain vulnerabilities, as demonstrated by the hack on SitusAMC.  Because of its extensive resources and stringent restrictions, security experts believe the financial services sector has the strongest digital defences of any business.  

However, the industry is still susceptible to assaults that take advantage of flaws in its third-party suppliers, just like many others.  

Compared to the critical infrastructure providers they support, vital but obscure companies like SitusAMC usually receive significantly less inspection, resulting in security flaws that occasionally show up as large cyberattacks.

Also Read: Study Reveals Extent of Sensitive Data Leaks in Cyberattacks, Including Crypto Keys, With 90% of Data Containing Financial Records

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest