CEX data hacker demands $20 million ransom, has fired involved personnel and handed over to law enforcement.

Shares of cryptocurrency trading platform CEX Global fell more than 7% on Thursday after foxbusiness reported that a cyberattack caused a data breach of its customers’ accounts that could have cost the company up to $400 million. The stolen account data affected “a small group of customers,” including names, addresses, phone numbers, emails, and government ID photos. The company said in regulatory filings filed Thursday that passwords and private keys were not compromised. CEX, which currently manages more than $328 billion in assets, received an email from an unknown threat actor claiming to have access to customer account information as well as internal documents. The files reveal that the cybercriminals demand a ransom of $20 million in exchange for not making the information public. The hackers paid multiple contractors and support staff outside the United States to obtain the information. According to CEX, they have fired those involved and turned them over to law enforcement.