共同數據洩露

上次更新於2025年5月16日

Coinbase Security Incident: What Happened?

Coinbase安全事件：發生了什麼？

Cryptocurrency exchange Coinbase reportedly received an email in May from an unidentified threat actor claiming they had breached the company’s cybersecurity and gained unauthorized access to certain customer data and internal documentation. An internal investigation revealed that the threat actor had threatened to sell the stolen data and demanded a ransom payment of $20 million.

據報導，Cryptocurrency Exchange Coinbase於5月收到了一位身份不明的威脅演員的電子郵件，聲稱他們違反了公司的網絡安全，並獲得了未經授權訪問某些客戶數據和內部文檔的訪問。內部調查顯示，威脅性演員威脅要出售被盜的數據，並要求支付2000萬美元的贖金。

The company confirmed the breach in a filing with the U.S. Securities and Exchange Commission and a May 15 blog post, stating that the incident affected less than 1% of its monthly transacting users. The company’s statement said that the data accessed included customer names and addresses, the last four digits of Social Security numbers, and emails. Additionally, some users’ masked bank account numbers and bank account identifiers, images from government-issued ID like driver’s licenses and passports, account data, and limited corporate data were also reportedly compromised. However, no passwords or private keys were exposed.

該公司在提交給美國證券交易委員會的文件中證實了這一違規行為以及5月15日的博客文章，稱該事件影響了其每月交易用戶不到1％。該公司的聲明說，訪問的數據包括客戶名稱和地址，社會保險號碼的最後四位數字以及電子郵件。此外，據報導，一些用戶蒙版的銀行帳號和銀行帳戶標識符，政府發行的ID的圖像（例如駕駛執照和護照），帳戶數據以及有限的公司數據也受到損害。但是，沒有暴露密碼或私鑰。

Coinbase said it chose not to pay the ransom and is instead cooperating with authorities to pursue the criminals. The company is offering a $20 million reward for information leading to the arrest and conviction of those responsible for the incident. A company spokesperson told ClassAction.org that notices are being sent to affected users.

Coinbase表示，它選擇不支付贖金，而是與當局合作以追捕罪犯。該公司為信息提供了2000萬美元的獎勵，從而導致逮捕和定罪為事件的人逮捕和定罪。公司發言人告訴ClassAction.org，通知已發送給受影響的用戶。

What Happens Now

現在會發生什麼

If your information was exposed in the Coinbase data breach, you may be able to take legal action via mass arbitration, which is different from a class action lawsuit.

如果您的信息是在Coinbase數據洩露中暴露的，則您可以通過群眾仲裁採取法律訴訟，這與集體訴訟不同。

A group of attorneys is gathering people to sign up for legal action. If enough people decide to participate, the case could proceed in the form of mass arbitration.

一群律師正在聚集人們簽署法律行動。如果有足夠的人決定參加，則該案可以以群眾仲裁的形式進行。

The attorneys are helping to handle the case, and they will receive a fee if there is a recovery. Otherwise, they will not be paid.

律師正在幫助處理此案，如果有康復，他們將獲得費用。否則，他們將不會被支付。

Those who sign up and take action could be entitled to compensation from Coinbase for violations of state consumer protection and privacy laws.

那些簽署並採取行動的人有權獲得Coinbase的賠償，以違反國家消費者保護和隱私法。

Got a notice about the Coinbase data breach? Fill out this quick, secure form to join others taking action.

收到有關Coinbase數據洩露的通知嗎？填寫此快速，安全的表格，以加入其他人採取行動。