Kroll, a risk and financial advisory firm, is facing a class-action lawsuit over its handling of an August 2023 data breach that exposed information belonging to creditors of FTX, BlockFi, and Genesis.
The case, filed by Hall Attorneys in a US district court, represents FTX customer Jacob Repko and other affected creditors.
The complaint argues that attackers used stolen details from the breach to launch ongoing phishing campaigns. Many creditors said they receive scam emails almost every day.

Did you know?
Subscribe – We publish new crypto explainer videos every week!
What is Uniswap? (UNI Token Explained With Animation)
FTX creditor Sunil Kavuri shared screenshots showing repeated attempts, including several messages sent between August 14 and 17.
The lawsuit also pointed to weaknesses in how Kroll contacted creditors. The company relied only on email, a method that scammers could easily imitate. According to the filing, the method weakened trust, disrupted the claims process, and in some cases led to losses.
The plaintiffs are asking not only for damages but also for changes in Kroll’s communication methods. They argued that creditors should not be left with a single channel that criminals can copy.
Nicholas Hall, who leads Bankruptcy and Complex Litigation at Hall Attorneys, noted that affected creditors could be eligible for compensation. He added that the case could push Kroll to update its operations.
Hall also runs the FTX Claims website, which helps creditors manage their claims.
On August 11, FTX’s former users asked a court to let them update their lawsuit against Fenwick & West. What did they say? Read the full story.