CRITICALData Breach
Verified
Global

Lazarus Group Linked to $1.5B Bybit Cryptocurrency Heist

·Source: FBI / Chainalysis

Updated:

Executive Summary

FBI attributes the $1.5 billion Bybit cryptocurrency exchange hack to North Korea Lazarus Group. Largest crypto theft in history.

Analysis

FBI confirmed Lazarus Group stole approximately $1.5 billion in crypto assets from Bybit through a sophisticated supply chain compromise of the Safe{Wallet} multisig infrastructure. Attackers compromised a developer machine to inject malicious code into the transaction signing process. Funds being laundered through chain-hopping and mixing services.

Timeline

Discovered
Feb 21, 2026
Exploitation Detected
Feb 21, 2026
Published
Mar 19, 2026
Source Attribution

Originally published by FBI / Chainalysis on Mar 19, 2026. Verified by: FBI, Chainalysis, TRM Labs.

Related Threats

HIGHData BreachNEW

Endue Software Agrees to $870,000 Data Breach Settlement

Endue Software has agreed to pay $870,000 to settle a class action lawsuit that was filed in response to a […] The post Endue Software Agrees to $870,000 Data Breach Settlement appeared first on The HIPAA Journal .

HIPAA Journal
MEDIUMData Breach

B1ack’s Stash Marketplace Gives Away 4.6 Million Stolen Credit Cards

The stolen credit card data was released as a free download, allegedly in response to seller misconduct. The post B1ack’s Stash Marketplace Gives Away 4.6 Million Stolen Credit Cards appeared first on SecurityWeek .

SecurityWeek
HIGHData Breach

Up to 1.8 Million Individuals Affected by NYC Health + Hospitals Data Breach

The HIPAA Journal reported on a data breach affecting patients of NYC Health + Hospitals Corporation in late March (see […] The post Up to 1.8 Million Individuals Affected by NYC Health + Hospitals Data Breach appeared first on The HIPAA Journal .

HIPAA Journal