Coinbase正在处理最近的网络攻击的后果

漏洞影响了用户的“小子集”，并包括敏感信息，例如名称，电子邮件地址，电话号码

Crypto exchange Coinbase is dealing with the fallout of a recent cyberattack that exposed personal data of some of its customers and may cost the company up to $400 million, according to a regulatory filing.

根据监管文件，Crypto Exchange Coinbase正在处理最近的网络攻击的后果，该网络攻击暴露了其某些客户的个人数据，并可能使公司损失高达4亿美元。

The company said on Thursday that the breach impacted a “small subset” of users and included sensitive information such as names, email addresses, phone numbers, partial Social Security numbers, masked bank account details, and even government-issued IDs. Login credentials and private keys were not accessed, Coinbase assured users.

该公司周四表示，违规行为影响了用户的“小子集”，并提供了敏感信息，例如姓名，电子邮件地址，电话号码，部分社会保险号，蒙版的银行帐户详细信息，甚至是政府发行的ID。 Coinbase向用户保证，无法访问登录凭据和私钥。

“Cyber criminals bribed and recruited rogue overseas support agents to pull personal data on <1% of Coinbase MTUs. No passwords, private keys, or funds were exposed. Prime accounts are untouched. We will reimburse impacted customers,” Coinbase wrote on X.

“网络罪犯贿赂并招募了流氓海外支持代理商，以获取<1％的Coinbase mtus的个人数据。没有密码，私钥或资金被暴露。未触及Prime帐户。我们将重新注销受影响的客户，” Coinbase在X上写道。

We are disclosing a legal matter that may impact our financials. A third-party contractor pulled personal data on <1% of Coinbase MTUs. No passwords, private keys, or funds were exposed. Prime accounts are untouched. We will reimburse impacted customers. Here's what happened:Earlier this year, we became aware of a threat actor attempting to extort Coinbase and sell personal data of a small subset of our customers. The threat actor, who appears to be based in Eastern Europe, threatened to release the data unless we paid a ransom of $20 million in Bitcoin by May 10. They also claimed to have internal documents, such as presentations and meeting notes.

我们正在披露可能影响我们的财务状况的法律问题。第三方承包商将<1％Coinbase MTU的个人数据提取了。没有暴露密码，私钥或资金。主要帐户未触及。我们将偿还影响客户的影响。发生了什么事：今年早些时候，我们意识到威胁性演员试图勒索并出售一小部分客户的个人数据。这位似乎位于东欧的威胁行为者威胁要发布数据，除非我们在5月10日之前支付了2000万美元的比特币赎金。他们还声称拥有内部文件，例如演讲和会议票据。

We learned that the threat actor had managed to bribe several third-party contractors and support staff outside of the United States to gain access to internal data. Those involved have been identified and terminated.

我们了解到，威胁行为者设法贿赂了美国以外的几个第三方承包商和支持员工，以获取内部数据。涉及的人已被确定并终止。

The threat actor appears to have pulled the personal data of <1% of Coinbase users. This information includes names, email addresses, phone numbers, partial Social Security numbers, masked bank account details, and government-issued ID types. However, login credentials and private keys were not accessed. In addition, the threat actor does not appear to have accessed any prime accounts or any other internal data.

威胁参与者似乎已经提取了<1％的Coinbase用户的个人数据。此信息包括名称，电子邮件地址，电话号码，部分社会保险号，蒙版的银行帐户详细信息和政府发行的ID类型。但是，未访问登录凭据和私钥。此外，威胁参与者似乎没有访问任何主要帐户或任何其他内部数据。

We are deeply sorry that this incident occurred. We take the security and privacy of our customers’ data extremely seriously. We are working diligently to mitigate any potential impact on our customers and to take steps to prevent such incidents from happening in the future.

我们非常抱歉发生了这一事件。我们非常重视客户数据的安全性和隐私。我们正在努力减轻对客户的任何潜在影响，并采取措施防止将来发生此类事件。

Coinbase is a leading cryptocurrency exchange that provides a platform for buying, selling, and trading digital currencies. The company is publicly traded on the Nasdaq Stock Exchange. It is also subject to regulation by the U.S. Securities and Exchange Commission (SEC) and other agencies.The company said it expects a financial impact ranging between $180 million and $400 million as a result of the attack. Its stock dropped by over 6.5 per cent following the news.

Coinbase是领先的加密货币交易所，为购买，销售和交易数字货币提供了一个平台。该公司在纳斯达克证券交易所公开交易。该公司表示，该公司还受到美国证券交易委员会（SEC）和其他机构的监管。新闻后，其股票下跌了6.5％。

Separately, the US Securities and Exchange Commission (SEC) is looking into whether Coinbase previously provided inaccurate information about its user statistics. According to Reuters, the regulator is reviewing the company’s previously reported “verified user” numbers, which could raise concerns about its customer verification practices.

另外，美国证券交易委员会（SEC）正在研究Coinbase先前是否提供了有关其用户统计信息的不准确信息。据路透社报道，监管机构正在审查该公司先前报道的“经过验证的用户”数字，这可能引起人们对其客户验证实践的担忧。

However, Coinbase has denied any ongoing probe related to know-your-customer (KYC) or Bank Secrecy Act compliance. Chief Legal Officer Paul Grewal reportedly said that the investigation is a “hold-over” from the previous administration.

但是，Coinbase否认了与知识客户（KYC）或银行保密法的合规性有关的任何正在进行的调查。据报道，首席法律官保罗·格雷瓦尔（Paul Grewal）表示，调查是上届政府的“持有”。

“This is a hold-over investigation from the prior administration about a metric we stopped reporting two and a half years ago, which was fully disclosed to the public,” Grewal said. “While we strongly believe that this investigation should not continue, we remain committed to working with the SEC to bring this matter to a close.”

格雷瓦尔说：“这是先前政府的一项关于我们停止报告两年半前报告的指标的持有调查，这已被完全披露给公众。” “尽管我们坚信这项调查不应继续，但我们仍致力于与SEC合作，以结束此事。”

The SEC’s interest reportedly continues despite the agency dropping an earlier lawsuit that accused Coinbase of operating without proper registration.

据报道，尽管该机构在未经适当注册的情况下指控Coinbase进行操作，但SEC的利息仍在继续。