共同数据泄露

上次更新于2025年5月16日

Coinbase Security Incident: What Happened?

Coinbase安全事件：发生了什么？

Cryptocurrency exchange Coinbase reportedly received an email in May from an unidentified threat actor claiming they had breached the company’s cybersecurity and gained unauthorized access to certain customer data and internal documentation. An internal investigation revealed that the threat actor had threatened to sell the stolen data and demanded a ransom payment of $20 million.

据报道，Cryptocurrency Exchange Coinbase于5月收到了一位身份不明的威胁演员的电子邮件，声称他们违反了公司的网络安全，并获得了未经授权访问某些客户数据和内部文档的访问。内部调查显示，威胁性演员威胁要出售被盗的数据，并要求支付2000万美元的赎金。

The company confirmed the breach in a filing with the U.S. Securities and Exchange Commission and a May 15 blog post, stating that the incident affected less than 1% of its monthly transacting users. The company’s statement said that the data accessed included customer names and addresses, the last four digits of Social Security numbers, and emails. Additionally, some users’ masked bank account numbers and bank account identifiers, images from government-issued ID like driver’s licenses and passports, account data, and limited corporate data were also reportedly compromised. However, no passwords or private keys were exposed.

该公司在提交给美国证券交易委员会的文件中证实了这一违规行为以及5月15日的博客文章，称该事件影响了其每月交易用户不到1％。该公司的声明说，访问的数据包括客户名称和地址，社会保险号码的最后四位数字以及电子邮件。此外，据报道，一些用户蒙版的银行帐号和银行帐户标识符，政府发行的ID的图像（例如驾驶执照和护照），帐户数据以及有限的公司数据也受到损害。但是，没有暴露密码或私钥。

Coinbase said it chose not to pay the ransom and is instead cooperating with authorities to pursue the criminals. The company is offering a $20 million reward for information leading to the arrest and conviction of those responsible for the incident. A company spokesperson told ClassAction.org that notices are being sent to affected users.

Coinbase表示，它选择不支付赎金，而是与当局合作以追捕罪犯。该公司为信息提供了2000万美元的奖励，从而导致逮捕和定罪为事件的人逮捕和定罪。公司发言人告诉ClassAction.org，通知已发送给受影响的用户。

What Happens Now

现在会发生什么

If your information was exposed in the Coinbase data breach, you may be able to take legal action via mass arbitration, which is different from a class action lawsuit.

如果您的信息是在Coinbase数据泄露中暴露的，则您可以通过群众仲裁采取法律诉讼，这与集体诉讼不同。

A group of attorneys is gathering people to sign up for legal action. If enough people decide to participate, the case could proceed in the form of mass arbitration.

一群律师正在聚集人们签署法律行动。如果有足够的人决定参加，则该案可以以群众仲裁的形式进行。

The attorneys are helping to handle the case, and they will receive a fee if there is a recovery. Otherwise, they will not be paid.

律师正在帮助处理此案，如果有康复，他们将获得费用。否则，他们将不会被支付。

Those who sign up and take action could be entitled to compensation from Coinbase for violations of state consumer protection and privacy laws.

那些签署并采取行动的人有权获得Coinbase的赔偿，以违反国家消费者保护和隐私法。

Got a notice about the Coinbase data breach? Fill out this quick, secure form to join others taking action.

收到有关Coinbase数据泄露的通知吗？填写此快速，安全的表格，以加入其他人采取行动。