Coinbase data leak \ stacker news ~bitcoin

pull down to refresh

Coinbase data leak www.coinbase.com/en-pt/blog/protecting-our-customers-standing-up-to-extortionists

621 sats \ 17 comments \ @megaptera 14h bitcoin

This is exactly why KYC is so dangerous. 5$ wrench attack incoming.

What happened Criminals targeted our customer support agents overseas. They used cash offers to convince a small group of insiders to copy data in our customer support tools for less than 1% of Coinbase monthly transacting users. Their aim was to gather a customer list they could contact while pretending to be Coinbase—tricking people into handing over their crypto. They then tried to extort Coinbase for $20 million to cover this up. We said no.

What they got

Name, address, phone, and email
Masked Social Security (last 4 digits only)
Masked bank‑account numbers and some bank account identifiers
Government‑ID images (e.g., driver’s license, passport)
Account data (balance snapshots and transaction history)
Limited corporate data (including documents, training material, and communications available to support agents)

view all related items

101 sats \ 10 replies \ @grayruby 12h

@mega_dreamer what does this mean for the coinbase hack market. I added some shares today but didn't want to buy too much because they didn't give a specific number of affected users. <1% but they have a lot of users so that is likely more than 10k as specified in the market criteria.

100 sats \ 3 replies \ @mega_dreamer 4h

I think this should resolve to YES. Go ahead place more bets. I will resolve it soon.

101 sats \ 2 replies \ @grayruby 4h

Great. Thanks

40 sats \ 1 reply \ @mega_dreamer 4h

Resolved YES:

101 sats \ 0 replies \ @grayruby 3h

Awesome. Thanks

20 sats \ 3 replies \ @Coinsreporter 12h

It's not a hack!!

13 sats \ 2 replies \ @grayruby 10h

Read the market resolution criteria.

40 sats \ 1 reply \ @Coinsreporter 8h

Yupp. Read it and placed some happy sats.

0 sats \ 0 replies \ @grayruby 8h

I am not sure if they will resolve yes though because we don’t have an actual user count. Although it is highly likely it is over 10k considering how many users they have.

20 sats \ 1 reply \ @megaptera OP 12h

This is not a hack. Some support agents got bribed to hand out customer data.

0 sats \ 0 replies \ @grayruby 10h

Market resolution criteria 2. “ Unauthorized access to sensitive user information affecting 10,000 or more accounts”

47 sats \ 1 reply \ @Wumbo 14h

What we are doing about it

Extra customer safeguards — Flagged accounts now require additional ID checks on large withdrawals and include mandatory scam‑awareness prompts. As we monitor high risk transactions, you may experience delays.

Come on CoinBase, your answer to the issue is to request more personal information. and government ID

This Section:

How you can stay safe

does not address any physical security issues.

0 sats \ 0 replies \ @megaptera OP 14h

🤦‍♂️

21 sats \ 0 replies \ @j7hB75 9h

Let this be a warning that any other KYC service is prone to the same vulnerabilities.