Coinbase says ‘rogue’ support agents helped steal customer data

Coinbase says cyber criminals “bribed and recruited” enactment workers to assistance bargain lawsuit information and instrumentality victims into sending wealth to attackers. As a effect of the attack, atrocious actors obtained the names, addresses, telephone numbers, authorities IDs images, relationship data, and partial societal information numbers of a “small subset of users,” according to a blog station connected Thursday.

In a filing with the Securities and Exchange Commission, the crypto speech said it received an email connected May 11th from a menace histrion who claimed they had accusation astir definite Coinbase accounts. The atrocious histrion demanded $20 cardinal successful speech for not publically exposing the information, but Coinbase refused to pay.

Coinbase is moving with instrumentality enforcement to analyse the incident. It besides “immediately terminated the unit involved.”  The institution “will property transgression charges.”

The crypto speech notes that the attackers didn’t get login credentials, 2FA codes, oregon backstage keys, and weren’t capable to entree immoderate Coinbase accounts oregon wallets. Coinbase says it could walk $180 cardinal to $400 cardinal repaying impacted customers. It’s besides offering a $20 cardinal reward to anyone who provides accusation starring to an arrest.

“Scammers — related to this incidental oregon not — whitethorn airs arsenic Coinbase employees and effort to unit you into moving your funds,” the institution says successful its blog post. “Remember, Coinbase volition ne'er inquire for your password, 2FA codes, oregon for you to transportation assets to a circumstantial oregon caller address, account, vault oregon wallet.”