Coinbase在生物識別和數據洩露訴訟後面臨越來越多的法律危機

在新的訴訟針對其生物識別實踐和最近的數據洩露披露之後，Coinbase面臨著越來越多的法律危機。

Coinbase is now facing a mounting legal crisis as fresh lawsuits targeted its biometric practices and recent data breach disclosure.

Coinbase現在面臨著越來越多的法律危機，因為新的訴訟針對其生物識別實踐和最近的數據洩露披露。

On May 13, three Illinois residents—Scott Bernstein, Gina Greeder, and James Lonergan—filed a class-action lawsuit in the U.S. District Court for the Northern District of Illinois against Coinbase (NASDAQ:COIN) over violations of the state’s Biometric Information Privacy Act (BIPA).

5月13日，三名伊利諾伊州居民 - 伯恩斯坦，吉娜·格雷德（Gina Greeder）和詹姆斯·洛納根（James Lonergan）在美國伊利諾伊州北部地區的美國地方法院提起了集體訴訟，以違反該州的生物識別信息隱私法（BIPA），反對Coinbase（NASDAQ：COIN）。

The lawsuit, no. 1:23-cv-03100, arose from Coinbase's Know Your Customer (KYC) process, which the plaintiffs said collected biometric identifiers for facial recognition technology without proper disclosure or consent.

訴訟，不。 1：23-cv-03100，源自Coinbase的“知道客戶（KYC）”過程，原告表示未經適當披露或同意未經披露或同意而收集的面部識別技術的生物識別標識符。

As part of Coinbase's identity verification, users were required to upload a selfie and a government-issued ID, which a third-party software would process to extract facial geometry, according to the complaint. This amounted to a "wholesale collection" of faceprints, the plaintiffs asserted.

投訴稱，作為Coinbase身份驗證的一部分，要求用戶上傳自拍照和政府發行的ID，第三方軟件將處理該ID以提取面部幾何形狀。原告斷言，這相當於面部印花的“批發收集”。

Coinbase Sued Over Facial Recognition, Biometric Violations

共插案起訴面部識別，生物識別違規行為

On May 13, Illinois residents Scott Bernstein, Gina Greeder, and James Lonergan sued Coinbase (NASDAQ:COIN) in federal court for allegedly violating the Biometric Information Privacy Act (BIPA).

5月13日，伊利諾伊州居民斯科特·伯恩斯坦（Scott Bernstein），吉娜·格雷德（Gina Greeder）和詹姆斯·洛納根（James Lonergan）在聯邦法院起訴Coinbase（NASDAQ：COIN），因為據稱違反了《生物識別信息隱私法》（BIPA）。

The lawsuit, filed with the U.S. District Court for the Northern District of Illinois, focused on Coinbase's identity verification process and its handling of biometric data.

該訴訟向伊利諾伊州北部地區的美國地方法院提起，重點介紹了Coinbase的身份驗證過程及其對生物識別數據的處理。

According to the complaint, Coinbase collects selfies and government-issued IDs from users as part of KYC procedures. This data is reportedly sent to third-party companies like Jumio, Onfido, Au10tix, and Solaris, who use it to create and store unique identifiers like facial geometry.

根據投訴，Coinbase作為KYC程序的一部分從用戶那裡收集自拍照和政府發行的ID。據報導，這些數據被發送給Jumio，Onfido，Au10tix和Solaris等第三方公司，他們使用它來創建和存儲像面部幾何形狀這樣的唯一標識符。

However, plaintiffs maintained that Coinbase failed to disclose this practice to users or obtain their written consent, despite being obligated to do so under BIPA.

但是，原告堅持認為，Coinbase未能在BIPA下向用戶透露這種做法或獲得其書面同意。

"Coinbase does not publicly provide a retention schedule or destruction policy for biometric identifiers," the filing stated.

該文件說：“ Coinbase不會公開提供生物識別標識符的保留時間表或破壞政策。”

Moreover, the plaintiffs said that Coinbase refused to pay arbitration fees when over 10,000 users filed claims with the American Arbitration Association, leading to the automatic dismissal of those cases.

此外，原告表示，當超過10,000名用戶向美國仲裁協會提出索賠時，Coinbase拒絕支付仲裁費，從而自動駁回了這些案件。

The lawsuit also highlighted the potential financial impact, noting that each willful BIPA violation carries a penalty of up to $5,000, while negligent violations could incur a minimum penalty of $1,000.

該訴訟還強調了潛在的財務影響，並指出每種故意違反的BIPA違規行為均罰款高達5,000美元，而疏忽大意可能會造成最低罰款1,000美元。

Data Breach Fallout Triggers Second Round of Lawsuits

數據洩露的影響觸發了第二輪訴訟

The lawsuit concerning biometric violations came just two days before Coinbase disclosed a separate breach involving bribed employees and a $20 million extortion attempt.

關於生物識別行為的訴訟是在Coinbase透露涉及賄賂僱員和2000萬美元勒索嘗試的單獨違規的兩天之前。

In a May 15 disclosure, Coinbase revealed that cybercriminals had bribed several of its customer service agents in India to gain access to internal systems over a period of several months.

在5月15日的披露中，Coinbase透露，網絡犯罪分子賄賂了印度的幾位客戶服務代理商，以便在幾個月的時間內訪問內部系統。

The attackers reportedly stole user data including names, email addresses, Social Security numbers, driver’s license details, and partial banking information—affecting about 1.9 million users.

據報導，攻擊者偷走了用戶數據，包括姓名，電子郵件地址，社會保險號，駕駛執照詳細信息和部分銀行信息，影響約190萬用戶。

Following this disclosure, at least six separate lawsuits were filed between May 15 and May 16, accusing Coinbase of failing to protect sensitive information and responding inadequately to the breach.

在此披露之後，在5月15日至5月16日之間至少提起了六起單獨的訴訟，指控Coinbase未能保護敏感信息並響應違規行為不足。

One complaint, filed by plaintiff Paul Bender in New York, focused on Coinbase's failure to "implement and maintain reasonable security safeguards."

原告保羅·本德（Paul Bender）在紐約提出的一項投訴，重點是Coinbase未能“實施和維護合理的安全保障”。

Bender's suit described Coinbase's response as "inadequate, fragmented, and delayed," adding that affected users were not promptly informed or offered proper support.

班德（Bender）的訴訟將Coinbase的回應描述為“不足，分散和延遲”，並補充說，受影響的用戶未得到迅速告知或提供適當的支持。

The lawsuit also mentioned Coinbase's decision to cover the INDIA customer support agents' bribery with a $500,000 grant program for Indian women in STEM, which Bender's complaint described as a "PR stunt."

該訴訟還提到了Coinbase決定通過為STEM中的印度婦女提供500,000美元的印度婦女贈款計劃來覆蓋印度客戶支持代理商的賄賂，Bender的投訴被描述為“公關特技”。

Calls for Audits, Data Deletion, and Accountability

呼籲審核，數據刪除和問責制

A fifth lawsuit filed in California took a more aggressive stance, requesting that Coinbase purge all sensitive user data and hire third-party auditors to test its systems. Another case accused the exchange of unjust enrichment, claiming it failed to invest enough in cybersecurity.

在加利福尼亞提起的第五項訴訟採取了更具侵略性的立場，要求Coinbase清除所有敏感用戶數據並聘請第三方審計師來測試其係統。另一個案件指責交換不公正的富集，聲稱它未能在網絡安全上進行足夠的投資。

Coinbase has not yet publicly responded to the new lawsuits. Instead, it directed media outlets to a blog post addressing the data breach, in which it confirmed refusing the $20 million ransom and pledged to reimburse impacted users.

Coinbase尚未公開回應新訴訟。取而代之的是，它將媒體媒體定向到涉及數據洩露的博客文章，其中確認拒絕了2000萬美元的贖金，並承諾報銷對用戶的償還。

In a U.S. Securities and Exchange Commission filing, Coinbase estimated reimbursement costs could range between $180 million and $400 million.

在美國證券交易委員會文件中，Coinbase估計的報銷成本可能在1.8億至4億美元之間。

The company also confirmed that it fired a group of India-based customer service agents allegedly involved in social engineering attacks linked to the breach.

該公司還確認，它解雇了一組基於印度的客戶服務代理商，據稱參與了與違規有關的社會工程攻擊。

COIN Price Swings as Legal Exposure Rises

當法律曝光率上升時，硬幣價格波動

Following the May 15 disclosure, Coinbase (NASDAQ:COIN) stock fell 7%, reaching $244. It rebounded 9% the next day to close at $266, according to Google Finance.

5月15日披露後，Coinbase（NASDAQ：COIN）股票下跌7％，達到244美元。根據Google Finance的數據，第二天的反彈為9％，收於266美元。

The lawsuits come as Coinbase continues to be investigated by the U.S. Securities and Exchange Commission over 2021 user metrics.

訴訟是由美國證券交易委員會（Coinbase）繼續調查的2021年用戶指標。

The convergence of biometric suits and data breach fallout could create long-term

生物識別西服和數據洩露影響的融合可能會產生長期