Bitfinex 加密貨幣交易所遭受資料外洩指控

駭客組織 FSOCIETY 聲稱已從 Bitfinex 獲取了 2.5TB 的數據，其中包括 40 萬用戶的個人詳細資料。 Bitfinex 技術長 Paolo Ardoino 否認了這些說法，並表示 25,000 個共享電子郵件地址中只有 5,000 個屬於 Bitfinex 用戶，並且沒有提出贖金要求，這表明此次洩露是假的。

Massive Data Breach Alleged at Bitfinex Crypto Exchange

Bitfinex 加密貨幣交易所涉嫌大規模資料洩露

A notorious hacking group, known as FSOCIETY, has claimed responsibility for a significant data breach at the prominent cryptocurrency exchange Bitfinex. According to the group's statement on its dark web homepage, it gained access to a colossal 2.5 terabytes (TB) of sensitive information belonging to the exchange and its users.

一個臭名昭著的駭客組織 FSOCIETY 聲稱對著名加密貨幣交易所 Bitfinex 的重大資料外洩事件負責。根據該組織在其暗網主頁上的聲明，它獲得了屬於該交易所及其用戶的 2.5 TB 敏感資訊的存取權限。

FSOCIETY asserted that this trove of data included the personal details of approximately 400,000 users, including their know-your-customer (KYC) documents. The hacking group threatened to publish these documents publicly if Bitfinex failed to comply with its demands.

FSOCIETY 聲稱，這些數據包含約 40 萬名用戶的個人詳細信息，包括他們的了解您的客戶 (KYC) 文件。該駭客組織威脅稱，如果 Bitfinex 不遵守其要求，他們將公開發布這些文件。

However, Bitfinex's Chief Technology Officer (CTO), Paolo Ardoino, has swiftly dismissed these claims as "fake news." Ardoino analyzed the 25,000 email addresses shared by the alleged hackers and discovered that only 5,000 of them were associated with Bitfinex users. He argued that if the data originated from the Bitfinex database, the matching rate would be significantly higher.

然而，Bitfinex 首席技術長 (CTO) Paolo Ardoino 很快就駁斥了這些說法，稱其為「假新聞」。 Ardoino 分析了被指控的駭客共享的 25,000 個電子郵件地址，發現其中只有 5,000 個與 Bitfinex 用戶相關。他認為，如果資料源自Bitfinex資料庫，匹配率會明顯更高。

Furthermore, Ardoino pointed out that FSOCIETY had not contacted Bitfinex regarding any ransom demands. The group's initial post was published on April 25th, providing a seven-day window for communication. However, it was only discovered yesterday.

此外，Ardoino 指出，FSOCIETY 尚未就任何贖金要求聯繫 Bitfinex。該小組的最初貼文於 4 月 25 日發布，提供了 7 天的溝通窗口。然而，直到昨天才被發現。

"If they had genuine information, they would have requested a ransom through our bug bounty program, customer support ticket, emails, Twitter, etc., but no such request can be found," Ardoino stated.

Ardoino 表示：“如果他們有真實信息，他們會通過我們的漏洞賞金計劃、客戶支持票、電子郵件、Twitter 等請求贖金，但找不到此類請求。”

Ardoino also emphasized that Bitfinex's security measures prevent the bulk download of user KYC documents. Nevertheless, he assured that the exchange's security team remains vigilant and is monitoring for any suspicious activity.

Ardoino 也強調，Bitfinex 的安全措施可防止使用者 KYC 檔案的大量下載。儘管如此，他保證交易所的安全團隊仍保持警惕，並正在監視任何可疑活動。

Despite the lack of evidence supporting FSOCIETY's claims, some users expressed concern and took precautionary measures. The alleged hackers released sample data containing 22,500 records of email addresses and passwords, leading to widespread speculation and anxiety among Bitfinex users.

儘管缺乏證據支持 FSOCIETY 的說法，但一些用戶表示擔憂並採取了預防措施。被指控的駭客公佈了包含 22,500 條電子郵件地址和密碼記錄的樣本數據，引發了 Bitfinex 用戶的廣泛猜測和焦慮。

However, Ardoino clarified that Bitfinex does not store plaintext passwords or two-factor authentication secrets in plaintext. He reassured users that their funds and accounts remained secure.

然而，Ardoino 澄清說，Bitfinex 不會以明文形式儲存明文密碼或二因素身份驗證秘密。他向用戶保證他們的資金和帳戶仍然安全。

The news of the alleged data breach has not significantly impacted the price of Bitfinex's native token, UNUS SED LEO (LEO). The token experienced a minor dip but has since stabilized. LEO is a utility token used to reduce trading fees on the Bitfinex platform and participate in various exchange activities.

涉嫌資料外洩的消息並未對 Bitfinex 原生代幣 UNUS SED LEO (LEO) 的價格產生重大影響。該代幣經歷了小幅下跌，但此後已趨於穩定。 LEO 是一種實用代幣，用於降低 Bitfinex 平台上的交易費用並參與各種交易所活動。

Bitfinex has urged its users to remain vigilant and change their passwords regularly as a precautionary measure. The exchange has also recommended that users enable two-factor authentication for added security.

Bitfinex 敦促用戶保持警惕並定期更改密碼作為預防措施。該交易所還建議用戶啟用雙重認證以提高安全性。

The alleged data breach at Bitfinex serves as a stark reminder of the constant threat posed by cybercriminals to the cryptocurrency industry. Exchanges and users alike must prioritize robust security measures and remain vigilant to protect themselves from potential attacks.

Bitfinex 涉嫌的資料外洩事件清楚地提醒人們，網路犯罪分子對加密貨幣產業構成持續威脅。交易所和用戶都必須優先考慮強有力的安全措施，並保持警惕，保護自己免受潛在的攻擊。