Coinbase承諾在罪犯賄賂客戶服務代理商竊取數據後償還客戶

布萊恩·阿姆斯特朗（Brian Armstrong）在社交媒體帖子中說，罪犯賄賂了一些居住在美國以外的公司的客戶服務代理

Coinbase is refusing to pay a ransom to hackers who threatened to release customer data after bribing some of the company’s customer service agents.

Coinbase拒絕向黑客支付贖金，這些黑客在賄賂某些公司的客戶服務代理商後威脅要發布客戶數據。

In a social media post on Monday, Coinbase chief executive Brian Armstrong said that criminals had bribed some of the company’s customer service agents who live outside the US to hand over personal data on customers, such as names, dates of birth and partial social security numbers.

Coinbase首席執行官布萊恩·阿姆斯特朗（Brian Armstrong）在周一的社交媒體帖子中說，犯罪分子賄賂了該公司的一些客戶服務代理商，他們居住在美國以外的地區，向客戶提供個人數據，例如姓名，出生日期和部分社會保險號。

“(The stolen data) allows them to conduct social engineering attacks where they can call our customers impersonating Coinbase customer support and try to trick them into sending their funds to the attackers,” Mr Armstrong said.

阿姆斯特朗說：“（被盜的數據）使他們能夠進行社會工程攻擊，他們可以打電話給我們的客戶冒充Coinbase客戶支持，並試圖欺騙他們將資金匯款給攻擊者。”

Social engineering is a popular hacking strategy, as humans tend to be the weakest link in any network. Many large companies have suffered hacks and data breaches as a result of such scams in recent years.

社會工程是一種流行的黑客策略，因為人類往往是任何網絡中最弱的聯繫。近年來，由於這種騙局，許多大公司遭受了黑客攻擊和數據洩露。

Coinbase did not specify how many customers had their data stolen or fell prey to social engineering scams. But the company did pledge to reimburse any who did.

Coinbase沒有指定有多少客戶被盜或淪為社會工程騙局的獵物。但是該公司確實保證償還任何這樣做的人。

In a filing with the Securities and Exchange Commission (SEC), Coinbase estimated that it would have to spend between 180 million dollars (£135.5 million) and 400 million dollars (£301 million) “relating to remediation costs and voluntary customer reimbursements relating to this incident”.

在向美國證券交易委員會（SEC）提交的文件中，Coinbase估計，它必須花費在1.8億美元（1.355億英鎊）和4億美元（3.01億英鎊）之間，“與補救成本和與此事件有關的自願客戶報銷有關”。

The SEC filing said that the company had, “in previous months”, detected some of its customer service agents “accessing data without business need”. Those employees had been sacked, and the company said it stepped up its fraud prevention efforts.

SEC申請表示，該公司“在過去的幾個月”中發現了一些客戶服務代理“無需商務需要訪問數據”。這些員工被解雇了，該公司表示加強了預防欺詐的工作。

For these would-be extortionists or anyone seeking to harm Coinbase customers, know that we will prosecute you and bring you to justice

對於這些潛在的勒索主義者或試圖損害Coinbase客戶的任何人，請知道我們將起訴您並將您繩之以法

Coinbase said it received an email from the attackers on Sunday demanding a ransom of 20 million dollars worth of bitcoin not to publicly release the customer data they had stolen.

Coinbase表示，它在周日收到了襲擊者的電子郵件，要求價值2000萬美元的比特幣贖金，以免公開發布他們被盜的客戶數據。

Mr Armstrong said the company was refusing to pay the ransom and would instead offer a 20 million dollar bounty for anyone who provided information that led to the attackers’ arrest.

阿姆斯特朗先生說，該公司拒絕支付贖金，而是為提供導致襲擊者被捕的信息的任何人提供2000萬美元的賞金。

“For these would-be extortionists or anyone seeking to harm Coinbase customers, know that we will prosecute you and bring you to justice,” Mr Armstrong said.

阿姆斯特朗說：“對於這些可能的勒索主義者或試圖損害Coinbase客戶的任何人，請知道我們將起訴您並將您繩之以法。”

“And know you have my answer.”

“知道你有我的答案。”