Coinbase披露数据泄露的影响不到1％

美国最大的加密货币交易所Coinbase在2025年5月披露了严重的数据泄露，影响了其不到1％的用户。

Coinbase, the largest U.S. cryptocurrency exchange, has disclosed a significant data breach affecting less than 1% of its users, hackers bribed overseas support agents to steal personal data.

Coinbase是美国最大的加密货币交易所，已披露了严重的数据泄露，影响了不到1％的用户，黑客贿赂了海外支持代理商以窃取个人数据。

What Happened: On May 15, hackers breached the security protocols of Coinbase (NASDAQ:COIN), reportedly bribing and recruiting rogue overseas support agents and contractors, who leaked sensitive information.

发生的事情是：5月15日，黑客违反了Coinbase（NASDAQ：COIN）的安全协议，据报道贿赂和招募了Rogue Overseas Supperase支持代理商和承包商，他们泄露了敏感信息。

The compromised data includes names, phone numbers, addresses, government IDs, partial Social Security numbers, and account details. However, no passwords, private keys, or funds were compromised, and the exchange’s Prime accounts remained untouched.

折衷的数据包括姓名，电话号码，地址，政府ID，部分社会安全号码和帐户详细信息。但是，没有密码，私钥或资金受到损害，交易所的主要帐户仍未受到影响。

A small subset of Coinbase’s monthly transacting users (MTUs) had personal data stolen, estimated at less than 1%, which translates to approximately 97,000 customers, considering the company’s 9.7 million MTUs reported in its March annual report.

考虑到该公司在3月的年度报告中报道，Coinbase每月交易用户（MTU）的一小部分被盗，估计不到1％，转化为约97,000个客户。

The hackers demanded a $20 million ransom to refrain from publicly releasing the stolen data, a request that Coinbase refused. In response, the exchange is terminating the involved staff, plans to press criminal charges, and has established a $20 million reward fund for information leading to the perpetrators’ arrest and conviction.

黑客要求耗资2000万美元的赎金，以避免公开释放被盗的数据，这是Coinbase拒绝的请求。作为回应，交易所正在终止参与人员，计划向刑事指控申请，并为导致肇事者被捕和定罪的信息建立了2000万美元的奖励基金。

Coinbase estimates the financial impact of the breach, including customer reimbursements and recovery efforts, could range from $180 million to $400 million.

Coinbase估计，包括客户报销和恢复工作在内的违规行为的财务影响可能从1.8亿美元到4亿美元不等。

Coinbase’s Security Record

Coinbase的安全记录

This incident adds to a series of security challenges encountered by Coinbase throughout the years.

多年来，这一事件增加了Coinbase遇到的一系列安全挑战。

In 2021, hackers exploited a flaw in SMS-based two-factor authentication (2FA) through phishing scams, affecting over 6,000 users. The hackers gained access to user credentials and stole crypto assets.

2021年，黑客通过网络钓鱼骗局利用了基于SMS的两因素身份验证（2FA）中的缺陷，影响了6,000多名用户。黑客获得了对用户凭据和偷走加密资产的访问权限。

In 2023, the Octopus hacker group attempted to breach Coinbase’s systems but failed. The group is known for spear phishing attacks on employees of cryptocurrency firms.

2023年，章鱼黑客集团试图违反Coinbase的系统，但失败了。该小组以对加密货币公司员工的矛网钓鱼攻击而闻名。

Despite robust security measures – such as storing 98% of assets in offline cold storage, AES-256 encryption, and insurance for hot wallets – Coinbase has struggled with technical issues like server crashes during high-traffic periods and account recovery vulnerabilities. These incidents fuel user skepticism, with some reporting difficulties obtaining timely support.

尽管采取了强大的安全措施，例如将98％的资产存储在离线冷藏库中，AES-256加密和热钱包的保险 - Coinbase仍在努力处理技术问题，例如在高流量期间服务器崩溃和帐户恢复漏洞。这些事件助长了用户的怀疑，一些报告困难获得了及时的支持。

Coinbase’s security practices have come under scrutiny, particularly in the wake of a $15 million rug pull scam that defrauded users of the Base blockchain project, a subsidiary of Coinbase. The scammers created a fake version of the Base website and stole user funds.

Coinbase的安全惯例受到了审查，特别是在一个耗资1500万美元的地毯拉骗局之后，欺骗了Coinbase的子公司基本区块链项目的用户。骗子创建了基本网站的假版，并偷走了用户资金。

Coinbase is also facing a lawsuit from a group of Coinbase users who are seeking class action status over the alleged mishandling of a phishing attack that affected a large number of users in 2022. The hackers reportedly stole over $370 million in crypto assets from user accounts.

Coinbase还面临着一群Coinbase用户的诉讼，他们正在寻求集体诉讼状况，因为所谓的网络钓鱼攻击不当，该攻击影响了2022年的大量用户。据报道，黑客从用户帐户中偷走了超过3.7亿美元的加密资产。

Coinbase has been a target of cybercriminals due to its status as a leading cryptocurrency exchange. The company is constantly investing in new security technologies and procedures to protect its users and assets from cyber threats.

由于其作为领先的加密货币交换的地位，Coinbase一直是网络犯罪分子的目标。该公司不断投资新的安全技术和程序，以保护其用户和资产免受网络威胁。