As you may be aware, FTX has learned that Kroll Restructuring Administration LLC (“Kroll”), the Court-appointed claims and noticing agent for the FTX bankruptcy proceedings, experienced a cyber security incident involving the personal information of certain claimants of FTX in the pending bankruptcy case. You may read more about the incident here: https://ftxquestions.kroll.com/
Please note that Kroll did not maintain any customer passwords to FTX accounts. Additionally, the cyber security incident did not affect any FTX systems or FTX digital assets.
Any information relating to any proofs of claim that you submitted via the Kroll customer claims portal is still intact and recorded on the claims register. There is no need to modify your claim or accepted schedule as a result of this incident, nor do you need to submit a claim again.
In response to the cyber security incident at Kroll, FTX took the precautionary measure of temporarily freezing affected user accounts within the customer claims portal. Affected customers were presented a prompt upon logging in informing them know why their account was frozen.
In addition, FTX has implemented additional measures that you may notice upon your next login attempt:
- All accounts that did not have 2FA set-up prior to the cyber security incident will now have email 2FA set by default.
- Email verification (Step 2) will now be required at each login. The information in Steps 3-5 on the FTX Claims Portal will not be available unless email verification is complete. Make sure that you are verifying your email on the same device where you are accessing your account.
- Simultaneous logins on multiple devices are no longer allowed.
If your account has been frozen due to the Kroll cyber security incident and you have email 2FA set on your account, or have not previously enabled 2FA, visit this page for a guide to enabling your account: Unlocking Accounts Affected by the Kroll Cyber Security Incident
Accounts using other forms of 2FA set should be able to login normally with email verification required upon each login.