The cryptocurrency e-commerce platform Bitrefill was hit by a cyberattack on March 1st, which has been attributed to North Korea's Lazarus Group. The attack resulted in the data breach of approximately 18,500 transactions. The attackers launched the assault through a compromised employee laptop, obtaining sensitive data, stealing funds from operational hot wallets, and pilfering gift card inventory. The leaked information includes email addresses, payment addresses, and user IP addresses. Bitrefill has notified affected customers and implemented enhanced security measures, including external penetration testing and stricter access controls.