Stockholm, 28 October 2026. GreenMerc AB (publ) announces that unauthorised parties have gained access to customer data at its wholly owned subsidiary NorthCrypto Oy. The access was gained through a vulnerability in an internal third-party reporting tool. The company no longer uses this tool.
The company's investigation has not been able to establish exactly which data has been disclosed. There is a risk that customers' personal data has been exposed. The encryption keys to the company's wallets have not been affected. The company's protective mechanisms worked as intended, and no customer funds were affected as a result. In one isolated case, however, an unauthorised withdrawal was made from a customer account due to human error. The affected customer will be fully compensated.
Affected customers are being informed and urged to remain vigilant.
"We take this very seriously and regret what has happened. Our focus is on protecting our customers and cooperating fully with the authorities," says Ari Liukko, CEO of GreenMerc AB (publ).
This information is information that GreenMerc AB (publ) is obliged to make public pursuant to the EU Market Abuse Regulation (MAR). The information was submitted for publication, through the agency of the contact person set out below, at 14:50 on 28 October 2026.