Coinbase（Coin.o）預測網絡攻擊的損失為1.8億至4億美元

該公司於5月11日收到了一位未知威脅行為者的電子郵件，聲稱擁有有關某些客戶帳戶以及內部文件的信息。

Coinbase (COIN.O) shares extended losses on Thursday after the crypto exchange said it expects an impairment of $180 million to $400 million related to a cyberattack that breached the personal data of a “small subset” of its customers.

Coinbase（Coin.o）股票在周四的股票上增加了損失，此前該加密貨幣交易所表示預計將減少與網絡攻擊有關的損害1.8億至4億美元，該網絡攻擊違反了其“小客戶”客戶的個人數據。

The company, which is set to join the S&P 500 index (SPX) next week, said it received an email from an unknown threat actor on May 11, claiming to have information about certain customer accounts as well as internal documents.

該公司將於下週加入標準普爾500指數（SPX），該公司於5月11日收到了一位未知威脅演員的電子郵件，聲稱有有關某些客戶帳戶以及內部文檔的信息。

While some data — including names, addresses and emails — was stolen, the hackers did not get access to login credentials or passwords, Coinbase said. It will, however, reimburse customers who were tricked into sending funds to the attackers.

Coinbase說，儘管某些數據（包括名稱，地址和電子郵件）被盜，但黑客無法訪問登錄憑據或密碼。但是，它將償還被欺騙向攻擊者匯款的客戶。

Hackers had paid multiple contractors and employees working in support roles outside the U.S. to collect information. The company has fired those involved, it said.

黑客已經向多個承包商和員工支付了美國以外從事支持角色收集信息的員工。它說，該公司解雇了參與其中的人。

Separately, the U.S. Securities and Exchange Commission had begun probing whether Coinbase's had misstated its user figures, and whether the firm had appropriate compliance in place to meet know-your-customer and Bank Secrecy Act rules designed to prevent money laundering, two sources familiar with the matter told Reuters.

另外，有兩名熟悉此事的消息人士告訴路透社，美國證券交易委員會已經開始探測Coinbase是否錯誤地陳述了其用戶數據，以及該公司是否有適當的合規性來滿足您的知識群體和銀行保密法規規則，旨在防止洗錢。

Coinbase denied the SEC was probing the company's compliance with know-your-customer and Bank Secrecy Act rules.

Coinbase否認SEC正在調查該公司遵守知識客戶和銀行保密法規則。

Coinbase shares were last down 6.5%.

Coinbase股票持續下跌6.5％。

"This is a hold-over investigation from the prior administration about a metric we stopped reporting two and a half years ago, which was fully disclosed to the public," Coinbase's chief legal officer, Paul Grewal, said.

Coinbase的首席法律官Paul Grewal說：“這是先前政府的一項關於我們停止報告兩年半前報告的指標的持有調查，該指標已被完全披露給公眾。”

"While we strongly believe this investigation should not continue, we remain committed to working with the SEC to bring this matter to a close."

“儘管我們堅信這項調查不應繼續，但我們仍然致力於與SEC合作，以結束此事。”

The SEC declined to comment.

SEC拒絕發表評論。

CRACKS IN CRYPTO

加密裂縫

The latest developments come days before the company is set to join the benchmark S&P 500 index, casting a shadow over what was expected to be a landmark moment for the crypto industry.

最新的發展是在公司將加入基準標準普爾500指數的幾天之前的幾天，對加密貨幣行業的里程碑式時刻投射了陰影。

At a time when the industry is battling to project stability and gain broader acceptance among mainstream investors, the incident could spur more scrutiny of crypto firms' internal controls and cybersecurity measures.

在該行業正在爭奪項目穩定並在主流投資者中獲得更廣泛接受的時候，該事件可能會更加謹慎地審查加密貨幣公司的內部控制和網絡安全措施。

Security remains a challenge for the crypto industry despite its growing mainstream acceptance. In February, Bybit disclosed a hack in which around $1.5 billion of digital tokens were stolen — widely dubbed the biggest crypto heist of all time.

儘管越來越多地接受了加密貨幣行業，但對加密行業的安全仍然是一個挑戰。 2月，拜比特（Bybit）透露了一個黑客，其中約有15億美元的數字代幣被盜 - 被廣泛稱為有史以來最大的加密搶劫。

"The cyberattack may push the industry to adopt stricter employee vetting and introduce some reputational risks," said Bo Pei, analyst at U.S. Tiger Securities.

美國老虎證券分析師Bo Pei說：“網絡攻擊可能會促使該行業採取更嚴格的員工審查，並引入一些聲譽風險。”

Funds stolen by hacking crypto platforms totaled $2.2 billion in 2024, according to a report from Chainalysis.

根據Chainalysis的一份報導，2024年被黑客加密平台盜竊的資金總計22億美元。

"As our nascent industry grows rapidly, it draws the eye of bad actors, who are becoming increasingly sophisticated in the scope of their attacks," said Nick Jones, founder of crypto firm Zumo.

加密公司Zumo公司的創始人尼克·瓊斯（Nick Jones）表示：“隨著我們新生的行業迅速發展，它吸引了壞演員的眼睛，他們在攻擊範圍內變得越來越複雜。”

The firm now also faces a lawsuit, filed in the Southern District of New York, alleging the world's largest crypto exchange failed to secure and safeguard personally identifiable information of millions of former and current customers, the filing showed.

該文件顯示，該公司現在還面臨訴訟，該訴訟在紐約南部地區提起，指控全球最大的加密貨幣交易所未能確保數百萬以前和現任客戶的個人身份信息。

Coinbase has refused to pay a ransom demand of $20 million from the attackers and is working with law enforcement agencies. It has instead established a $20 million reward for information on the hackers.

Coinbase拒絕向襲擊者支付2000萬美元的贖金需求，並正在與執法機構合作。相反，它為黑客提供了2000萬美元的獎勵。

The company is also opening a new support hub in the U.S. and taking other measures to prevent such cyberattacks, it said.

它還說，該公司還在美國開設一個新的支持樞紐，並採取其他措施防止此類網絡攻擊。