Bitfinex 加密货币交易所遭受数据泄露指控

黑客组织 FSOCIETY 声称已从 Bitfinex 获取了 2.5TB 的数据，其中包括 40 万用户的个人详细信息。 Bitfinex 首席技术官 Paolo Ardoino 否认了这些说法，称 25,000 个共享电子邮件地址中只有 5,000 个属于 Bitfinex 用户，并且没有提出赎金要求，这​​表明此次泄露是假的。

Massive Data Breach Alleged at Bitfinex Crypto Exchange

Bitfinex 加密货币交易所涉嫌大规模数据泄露

A notorious hacking group, known as FSOCIETY, has claimed responsibility for a significant data breach at the prominent cryptocurrency exchange Bitfinex. According to the group's statement on its dark web homepage, it gained access to a colossal 2.5 terabytes (TB) of sensitive information belonging to the exchange and its users.

一个臭名昭著的黑客组织 FSOCIETY 声称对著名加密货币交易所 Bitfinex 的重大数据泄露事件负责。根据该组织在其暗网主页上的声明，它获得了属于该交易所及其用户的 2.5 TB 敏感信息的访问权限。

FSOCIETY asserted that this trove of data included the personal details of approximately 400,000 users, including their know-your-customer (KYC) documents. The hacking group threatened to publish these documents publicly if Bitfinex failed to comply with its demands.

FSOCIETY 声称，这些数据包含大约 400,000 名用户的个人详细信息，包括他们的了解你的客户 (KYC) 文件。该黑客组织威胁称，如果 Bitfinex 不遵守其要求，他们将公开发布这些文件。

However, Bitfinex's Chief Technology Officer (CTO), Paolo Ardoino, has swiftly dismissed these claims as "fake news." Ardoino analyzed the 25,000 email addresses shared by the alleged hackers and discovered that only 5,000 of them were associated with Bitfinex users. He argued that if the data originated from the Bitfinex database, the matching rate would be significantly higher.

然而，Bitfinex 首席技术官 (CTO) Paolo Ardoino 很快驳斥了这些说法，称其为“假新闻”。 Ardoino 分析了被指控的黑客共享的 25,000 个电子邮件地址，发现其中只有 5,000 个与 Bitfinex 用户相关。他认为，如果数据源自Bitfinex数据库，匹配率会明显更高。

Furthermore, Ardoino pointed out that FSOCIETY had not contacted Bitfinex regarding any ransom demands. The group's initial post was published on April 25th, providing a seven-day window for communication. However, it was only discovered yesterday.

此外，Ardoino 指出，FSOCIETY 尚未就任何赎金要求联系 Bitfinex。该小组的最初帖子于 4 月 25 日发布，提供了 7 天的沟通窗口。然而，直到昨天才被发现。

"If they had genuine information, they would have requested a ransom through our bug bounty program, customer support ticket, emails, Twitter, etc., but no such request can be found," Ardoino stated.

Ardoino 表示：“如果他们有真实信息，他们会通过我们的漏洞赏金计划、客户支持票、电子邮件、Twitter 等请求赎金，但找不到此类请求。”

Ardoino also emphasized that Bitfinex's security measures prevent the bulk download of user KYC documents. Nevertheless, he assured that the exchange's security team remains vigilant and is monitoring for any suspicious activity.

Ardoino 还强调，Bitfinex 的安全措施可防止用户 KYC 文件的批量下载。尽管如此，他保证交易所的安全团队仍保持警惕，并正在监视任何可疑活动。

Despite the lack of evidence supporting FSOCIETY's claims, some users expressed concern and took precautionary measures. The alleged hackers released sample data containing 22,500 records of email addresses and passwords, leading to widespread speculation and anxiety among Bitfinex users.

尽管缺乏证据支持 FSOCIETY 的说法，但一些用户表示担忧并采取了预防措施。被指控的黑客公布了包含 22,500 条电子邮件地址和密码记录的样本数据，引发了 Bitfinex 用户的广泛猜测和焦虑。

However, Ardoino clarified that Bitfinex does not store plaintext passwords or two-factor authentication secrets in plaintext. He reassured users that their funds and accounts remained secure.

然而，Ardoino 澄清说，Bitfinex 不会以明文形式存储明文密码或二因素身份验证秘密。他向用户保证他们的资金和账户仍然安全。

The news of the alleged data breach has not significantly impacted the price of Bitfinex's native token, UNUS SED LEO (LEO). The token experienced a minor dip but has since stabilized. LEO is a utility token used to reduce trading fees on the Bitfinex platform and participate in various exchange activities.

涉嫌数据泄露的消息并未对 Bitfinex 原生代币 UNUS SED LEO (LEO) 的价格产生重大影响。该代币经历了小幅下跌，但此后已趋于稳定。 LEO 是一种实用代币，用于降低 Bitfinex 平台上的交易费用并参与各种交易所活动。

Bitfinex has urged its users to remain vigilant and change their passwords regularly as a precautionary measure. The exchange has also recommended that users enable two-factor authentication for added security.

Bitfinex 敦促用户保持警惕并定期更改密码作为预防措施。该交易所还建议用户启用双因素身份验证以提高安全性。

The alleged data breach at Bitfinex serves as a stark reminder of the constant threat posed by cybercriminals to the cryptocurrency industry. Exchanges and users alike must prioritize robust security measures and remain vigilant to protect themselves from potential attacks.

Bitfinex 涉嫌的数据泄露事件清楚地提醒人们，网络犯罪分子对加​​密货币行业构成持续威胁。交易所和用户都必须优先考虑强有力的安全措施，并保持警惕，保护自己免受潜在的攻击。