GreenMerc says unauthorised parties gained access to customer data at subsidiary NorthCrypto, through a vulnerability in a third-party tool no longer in use. Encryption keys were not affected, but one customer had funds withdrawn without authorisation.
Photo: Ari Liukko, CEO of GreenMerc AB (publ).
GreenMerc AB (publ) says unauthorised parties have had access to customer data at its wholly owned subsidiary NorthCrypto Oy. The announcement was published as inside information under the EU Market Abuse Regulation (MAR) on 28 October at 14:50.
The access occurred through a vulnerability in an internal third-party reporting tool. GreenMerc says the tool is no longer used by the company. The company's investigation has been unable to establish exactly which data was exposed, and it says there is a risk that customers' personal data has been exposed.
GreenMerc stresses that the encryption keys to the company's wallets were not affected, and that its security mechanisms worked as intended, meaning customer funds were not affected overall. The exception is a single case: an unauthorised withdrawal from one customer account occurred due to human error. The affected customer will be fully compensated.
In August 2025, sister company Trijo, another GreenMerc-owned crypto exchange, suffered unauthorised access to its internal systems. Withdrawals totalling SEK 7.8 million were made from Trijo's hot wallet, and personal data belonging to customers of both Trijo and NorthCrypto was suspected of being exposed at the time. GreenMerc compensated affected customers after that incident as well.
The company says affected customers are being informed and urged to stay vigilant.
GreenMerc AB (publ) CEO Ari Liukko says the company takes the incident very seriously and regrets what has happened. He says the focus is on protecting customers and cooperating fully with the authorities.
Sources: GreenMerc AB, Kaupr
You have read what you can read for free. With an account you get unlimited access to all news and articles on kaupr.io — and become part of the network of investors, professionals and builders following onchain finance.
