Bitfinex 駁斥資料外洩指控，堅稱沒有妥協證據

Bitfinex 技術長 Paolo Ardoino 駁斥了駭客組織 Fsociety 涉嫌入侵加密貨幣交易所 Bitfinex 資料庫並洩露客戶資料的說法。 Ardoino 聲稱，由於缺乏贖金要求或資料庫滲透的證據，人們對這些說法的真實性產生了懷疑，洩漏的資料與 Bitfinex 用戶記錄之間的不匹配進一步證明了這一點。

Bitfinex Denounces Alleged Data Breach, Claims No Evidence of Compromise

Bitfinex 譴責涉嫌資料洩露，聲稱沒有洩露證據

London, May 5, 2023 - Bitfinex, a leading cryptocurrency exchange, has vehemently denied claims by hacking group Fsociety that it successfully breached its database and compromised customer data.

倫敦，2023 年 5 月 5 日 - 領先的加密貨幣交易所 Bitfinex 強烈否認駭客組織 Fsociety 聲稱其成功入侵其資料庫並洩露客戶資料的說法。

Paolo Ardoino, Bitfinex's chief technology officer, categorically dismissed the allegations as "fake" in a statement released on May 4. He emphasized that a genuine hacker would have contacted Bitfinex directly through its established channels, such as the bug bounty program, customer support, or social media platforms, to demand a ransom.

Bitfinex 技術長Paolo Ardoino 在5 月4 日發布的聲明中斷然駁斥了這些指控，稱其為「虛假」。 、客戶支援、或社群媒體平台，索取贖金。

"We have meticulously examined our systems and found no evidence of any such request," Ardoino asserted.

「我們仔細檢查了我們的系統，沒有發現任何此類請求的證據，」阿爾多伊諾斷言。

He further clarified that Bitfinex employs robust security measures to protect user information. "We do not store plaintext passwords or 2FA secrets in clear text, ensuring that even if a breach were to occur, sensitive data would remain inaccessible," Ardoino explained.

他進一步澄清，Bitfinex 採用強大的安全措施來保護用戶資訊。 Ardoino 解釋說：“我們不會以明文形式存儲明文密碼或 2FA 機密，以確保即使發生洩露，敏感數據也將無法訪問。”

Regarding the leaked data, Ardoino confirmed that only about 22% (approximately 5,000) of the 22,500 email and password combinations released by Fsociety actually match with Bitfinex user accounts. He suggested that the hackers likely aggregated data from multiple unrelated breaches and falsely attributed it to Bitfinex.

關於洩漏的數據，Ardoino 證實，Fsociety 發布的 22,500 個電子郵件和密碼組合中，只有約 22%（約 5,000 個）實際上與 Bitfinex 用戶帳戶相符。他表示，駭客可能匯總了多個不相關違規事件的數據，並錯誤地將其歸咎於 Bitfinex。

"Unfortunately, many users adopt the careless practice of using the same email address and password across various online services," Ardoino noted. "This makes it easier for malicious actors to compromise multiple accounts with a single successful attack."

「不幸的是，許多用戶採取了粗心的做法，在各種線上服務中使用相同的電子郵件地址和密碼，」阿多伊諾指出。 “這使得惡意行為者更容易通過一次成功的攻擊來破壞多個帳戶。”

Ardoino also cited information provided by a security researcher, who theorized that Fsociety's motive for fabricating the Bitfinex breach was to promote a data retrieval hacking tool.

Ardoino 還引用了一位安全研究人員提供的信息，該研究人員推測 Fsociety 捏造 Bitfinex 漏洞的動機是為了推廣一種資料檢索駭客工具。

"By creating a buzz around their supposed success in hacking high-profile companies and universities, they aim to showcase the capabilities of their tool and entice potential buyers to exploit vulnerabilities in target organizations," Ardoino explained.

Ardoino 解釋說：“他們透過宣傳自己在攻擊知名公司和大學方面取得的成功，旨在展示其工具的功能，並吸引潛在買家利用目標組織中的漏洞。”

Despite the allegations, Ardoino reassured users that Bitfinex is conducting a thorough investigation and has not detected any evidence of a breach to date. He emphasized that "all funds are safe" and urged users to remain vigilant against potential phishing attempts.

儘管受到這些指控，Ardoino 仍向用戶保證 Bitfinex 正在進行徹底調查，迄今尚未發現任何違規證據。他強調“所有資金都是安全的”，並敦促用戶對潛在的網路釣魚企圖保持警惕。

Bitfinex has faced scrutiny over data breach concerns in the past. In 2023, a customer support agent's compromised account led to phishing attacks targeting Bitfinex users, although the company reported minimal damage. More significantly, in 2016, Bitfinex suffered a major security breach resulting in the theft of approximately $70 million worth of Bitcoin, which would be valued at over $7.6 billion today.

Bitfinex 過去曾因資料外洩問題而面臨審查。 2023 年，一名客戶支援代理的帳戶遭到入侵，導致針對 Bitfinex 用戶的網路釣魚攻擊，儘管該公司報告稱損失很小。更重要的是，2016 年，Bitfinex 遭遇重大安全漏洞，導致價值約 7,000 萬美元的比特幣被盜，如今這些比特幣的價值超過 76 億美元。

Bitfinex remains committed to maintaining the highest levels of security for its customers and will continue to invest in its infrastructure and protocols to safeguard their data and assets.

Bitfinex 仍然致力於為其客戶維護最高層級的安全性，並將繼續投資其基礎設施和協議以保護他們的資料和資產。