North Korean cybercriminals stole virtual funds from a cryptocurrency gift card service and accessed over 18,000 customer purchase records, the Sweden-based company announced on Tuesday.

In a statement posted on social media, Bitrefill said attackers breached its systems on March 1 and “exploited” its gift card stock and supply chain to steal cryptocurrency. It did not disclose the value of the stolen amount. 

The firm attributed the attack to North Korean actors based on observed similarities to past cryptocurrency theft operations by the DPRK’s Lazarus Group and its financially motivated subgroup Bluenoroff. The similarities included the attackers’ modus operandi,