Bitcoin payment service Bitrefill has disclosed a data breach following a cyberattack on March 1, 2026, attributed to suspected North Korean hackers. The breach, originating from a compromised employee laptop, exposed approximately 18,500 purchase records containing limited customer information, such as email addresses and cryptocurrency payment addresses. Additionally, around 1,000 records with encrypted customer names may have been accessed. Bitrefill reported that the attack methodology aligns with previous campaigns by the DPRK Lazarus/Bluenoroff group targeting crypto firms. The company assured customers that no specific action is required but advised vigilance against suspicious communications. Bitrefill has isolated affected systems and is working with security experts and law enforcement to restore operations, which are now nearly fully functional. The company remains financially stable and is enhancing its cybersecurity measures.