# Leaked Records Turn Holders Into Physical Targets

Breaches of tax, exchange and government databases keep converting pseudonymous on-chain wealth into identified targets, so physical coercion and impersonation fraud grow as an attack class alongside technical exploits, steadily shifting large private holders toward custodial and insured arrangements.

- Conviction: 30 / 100 (weakening)
- 7-day move: -8
- Horizon: Emerging (watchlist)
- Tracking since: 2026-08-16T00:00:00.000Z
- Last updated: 2026-08-27T14:00:27.996Z
- Canonical: https://polylog.news/crypto/trends/data-leaks-enable-physical-crypto-coercion
- Publisher: Polylog
- Affected regions: Global

## Recent score history

- 2026-08-27: 30
- 2026-08-28: 28

## Recent evidence

- [confirms] United States Prosecutors Charge Iranian Hacking Crew Over Thefts Including a $6 Million Bitcoin Ransom (2026-08-22): A separate campaign is posting physical letters imitating tax-authority mail to crypto holders, reported alongside the Iranian indictment. Attackers mailing named individuals at their home addresses confirms that identity linkage to on-chain wealth is already being operationalized offline, the step that precedes coercion.
- [confirms] Investigator Traces Coldcard Bitcoin Thief to a Paid Blockchain Data Account (2026-08-19): Block engineering lead Clay Garrett says a blockchain data provider's internal logs match the sweep of 1,082.65 BTC from a Coldcard user with what he calls extraordinary specificity, though the FBI has confirmed no identification or charge. Paid analytics accounts become a targeting database in the same way breached tax and exchange records do, widening the surveillance-to-victim pipeline the thesis tracks.

1 more evidence entry, the full score history, the conviction-driver timeline, and affected assets are for subscribers: https://polylog.news/pricing