CoinStats portfolio service suffered a breach affecting private keys for 1,590 user wallets, resulting in $2.2M in direct theft. Attackers compromised multiple CoinStats internal services and external integrations through sophisticated multi-vector intrusion. Lazarus Group is suspected as the attacker.