Coinbase說，海外支持員工賄賂了近7萬客戶的數據

這家加密貨幣巨頭確認，在周二向緬因州總檢察長提交的通知中，將收到公司有關襲擊的直接通信。

Coinbase has begun notifying 69,461 customers that their personal data was stolen in a December 26, 2024 breach, according to a notification filed with Maine's Attorney General on Tuesday.

根據緬因州總檢察長周二提交的一份通知，Coinbase已開始通知69,461個客戶，他們的個人數據在2024年12月26日的違規行為中被盜。

The crypto giant previously disclosed the attack in a May 15 Form 8-K filing with the Securities and Exchange Commission (SEC), estimating the cost of remediation to be between $180 million and $400 million.

這位加密貨幣巨頭先前在5月15日向美國證券交易委員會（SEC）提交的8-K提交表格中披露了襲擊，估計補救成本在1.8億美元至4億美元之間。

The company also stated that the criminals attempted to extort Coinbase for $20 million.

該公司還表示，罪犯試圖以2000萬美元的價格勒索Coinbase。

The filing with Maine's AG, which Coinbase is required to make as part of a state law enacted in 2023, provides an update on the actions taken since the initial announcement.

與緬因州的AG提交的文件，該文件必須作為2023年制定的州法律的一部分進行，並提供了自首次公告以來所採取的措施的最新信息。

This includes setting up a $20 million bounty for information that could lead to the attackers’ arrest and conviction, as well as pursuing all avenues available to the company to bring those responsible to justice.

這包括建立一個耗資2000萬美元的賞金，以獲取可能導致襲擊者被捕和定罪的信息，並追求公司可用的所有途徑，以將負責的人繩之以法。

Coinbase CEO Brian Armstrong also released a video message to customers on social media, in which he apologized for the impact on them and highlighted the company’s efforts to mitigate the incident.

Coinbase首席執行官布萊恩·阿姆斯特朗（Brian Armstrong）還在社交媒體上向客戶發布了一條視頻消息，他為對他們的影響而道歉，並強調了公司減輕事件的努力。

The filing confirms that the support staff involved in facilitating the data theft have all been fired by Coinbase, and their home country is not yet known.

該文件證實，參與促進數據盜竊的支持人員全部由Coinbase解僱，而他們的祖國尚不清楚。

However, active job boards show some support roles for the massive US cryptocurrency exchange are based in the UK, Ireland, India, the Philippines, and Japan.

但是，活躍的工作委員會顯示了大規模的美國加密貨幣交易所的一些支持角色，位於英國，愛爾蘭，印度，菲律賓和日本。

The expected cost of remediating the attack stands between $180 million and $400 million, Coinbase said in its SEC filing, although the full extent of the damage is still being investigated.

Coinbase在SEC提交的文件中表示，對襲擊進行補救的預期成本在1.8億至4億美元之間，儘管仍在調查損失的全部範圍。

Coinbase is also aware that some customers were successfully socially engineered by the attackers using the data stolen via the support staff.

Coinbase還意識到，一些客戶使用支持人員被盜的數據成功地通過攻擊者進行了社會設計。

To help mitigate this, customers who haven't yet been targeted are advised to remain vigilant against potential further criminal activity and targeting, as well as upping the security of their accounts.

為了幫助減輕這種情況，建議尚未被瞄準的客戶保持警惕，以應對潛在的進一步犯罪活動和目標，並提高其帳戶的安全性。

This includes implementing strong 2FA (hardware keys are the preferred choice here) and Withdrawal Allow Listing – a setting that allows withdrawals only from wallets explicitly trusted by the user.

這包括實現強2FA（硬件密鑰是此處的首選選擇）和提款允許列表 - 該設置僅允許從用戶明確信任的錢包中提取提取。

Affected customers are also being offered one year of identity protection and credit monitoring services through IDX, which is standard practice following such events. Instructions on how to claim this are included in the letters Coinbase sent to users.

還通過IDX向受影響的客戶提供了一年的身份保護和信用監控服務，這是此類活動之後的標準實踐。有關如何要求這件事的說明包含在發送給用戶的信件的信件中。