Stockholm, 31 July 2025 | GreenMerc AB (publ) discovered on the morning of July 31 that unauthorized access had occurred to parts of the company's internal systems. An internal investigation has confirmed that unauthorized withdrawals were carried out.
The suspected incident was identified early in the morning. Intruders gained access to internal systems and managed to execute a small number of unauthorized withdrawals from the cryptocurrency exchange Trijo's so-called hot wallet, where less than 1% of the exchange's assets are held. Out of approximately 65,000 customers, 27 accounts were affected. Customers impacted by unauthorized withdrawals will be fully compensated by GreenMerc. The total amount withdrawn corresponds to approximately SEK 7.8 million.
Throughout the day, GreenMerc has:
Identified how the breach occurred
Determined exactly what information was exposed and the financial damage caused
Taken measures to secure the systems and prevent future intrusions
In parallel, we are working to ensure that all affected customers are contacted directly and receive clear information about how they may have been impacted.
As there is reason to suspect that personal data from customers of both Trijo and Northcrypto may have been exposed, we have initiated the process of reporting the incident to the relevant authorities. Customers whose personal data may have been compromised will be contacted separately.
GreenMerc prioritizes security and customer trust, and takes this incident with the utmost seriousness.
Affected customers and shareholders are welcome to contact GreenMerc CEO Arvid Börje Ramberg at arvid@greenmerc.com with any further questions.
A Q&A with answers to additional questions regarding the incident is available at:
www.greenmerc.com/q&a