Coinbase在生物识别和数据泄露诉讼后面临越来越多的法律危机

在新的诉讼针对其生物识别实践和最近的数据泄露披露之后，Coinbase面临着越来越多的法律危机。

Coinbase is now facing a mounting legal crisis as fresh lawsuits targeted its biometric practices and recent data breach disclosure.

Coinbase现在面临着越来越多的法律危机，因为新的诉讼针对其生物识别实践和最近的数据泄露披露。

On May 13, three Illinois residents—Scott Bernstein, Gina Greeder, and James Lonergan—filed a class-action lawsuit in the U.S. District Court for the Northern District of Illinois against Coinbase (NASDAQ:COIN) over violations of the state’s Biometric Information Privacy Act (BIPA).

5月13日，三名伊利诺伊州居民 - 伯恩斯坦，吉娜·格雷德（Gina Greeder）和詹姆斯·洛纳根（James Lonergan）在美国伊利诺伊州北部地区的美国地方法院提起了集体诉讼，以违反该州的生物识别信息隐私法（BIPA），反对Coinbase（NASDAQ：COIN）。

The lawsuit, no. 1:23-cv-03100, arose from Coinbase's Know Your Customer (KYC) process, which the plaintiffs said collected biometric identifiers for facial recognition technology without proper disclosure or consent.

诉讼，不。 1：23-cv-03100，源自Coinbase的“知道客户（KYC）”过程，原告表示未经适当披露或同意未经披露或同意而收集的面部识别技术的生物识别标识符。

As part of Coinbase's identity verification, users were required to upload a selfie and a government-issued ID, which a third-party software would process to extract facial geometry, according to the complaint. This amounted to a "wholesale collection" of faceprints, the plaintiffs asserted.

投诉称，作为Coinbase身份验证的一部分，要求用户上传自拍照和政府发行的ID，第三方软件将处理该ID以提取面部几何形状。原告断言，这相当于面部印花的“批发收集”。

Coinbase Sued Over Facial Recognition, Biometric Violations

共插案起诉面部识别，生物识别违规行为

On May 13, Illinois residents Scott Bernstein, Gina Greeder, and James Lonergan sued Coinbase (NASDAQ:COIN) in federal court for allegedly violating the Biometric Information Privacy Act (BIPA).

5月13日，伊利诺伊州居民斯科特·伯恩斯坦（Scott Bernstein），吉娜·格雷德（Gina Greeder）和詹姆斯·洛纳根（James Lonergan）在联邦法院起诉Coinbase（NASDAQ：COIN），因为据称违反了《生物识别信息隐私法》（BIPA）。

The lawsuit, filed with the U.S. District Court for the Northern District of Illinois, focused on Coinbase's identity verification process and its handling of biometric data.

该诉讼向伊利诺伊州北部地区的美国地方法院提起，重点介绍了Coinbase的身份验证过程及其对生物识别数据的处理。

According to the complaint, Coinbase collects selfies and government-issued IDs from users as part of KYC procedures. This data is reportedly sent to third-party companies like Jumio, Onfido, Au10tix, and Solaris, who use it to create and store unique identifiers like facial geometry.

根据投诉，Coinbase作为KYC程序的一部分从用户那里收集自拍照和政府发行的ID。据报道，这些数据被发送给Jumio，Onfido，Au10tix和Solaris等第三方公司，他们使用它来创建和存储像面部几何形状这样的唯一标识符。

However, plaintiffs maintained that Coinbase failed to disclose this practice to users or obtain their written consent, despite being obligated to do so under BIPA.

但是，原告坚持认为，Coinbase未能在BIPA下向用户透露这种做法或获得其书面同意。

"Coinbase does not publicly provide a retention schedule or destruction policy for biometric identifiers," the filing stated.

该文件说：“ Coinbase不会公开提供生物识别标识符的保留时间表或破坏政策。”

Moreover, the plaintiffs said that Coinbase refused to pay arbitration fees when over 10,000 users filed claims with the American Arbitration Association, leading to the automatic dismissal of those cases.

此外，原告表示，当超过10,000名用户向美国仲裁协会提出索赔时，Coinbase拒绝支付仲裁费，从而自动驳回了这些案件。

The lawsuit also highlighted the potential financial impact, noting that each willful BIPA violation carries a penalty of up to $5,000, while negligent violations could incur a minimum penalty of $1,000.

该诉讼还强调了潜在的财务影响，并指出每种故意违反的BIPA违规行为均罚款高达5,000美元，而疏忽大意可能会造成最低罚款1,000美元。

Data Breach Fallout Triggers Second Round of Lawsuits

数据泄露的影响触发了第二轮诉讼

The lawsuit concerning biometric violations came just two days before Coinbase disclosed a separate breach involving bribed employees and a $20 million extortion attempt.

关于生物识别行为的诉讼是在Coinbase透露涉及贿赂雇员和2000万美元勒索尝试的单独违规的两天之前。

In a May 15 disclosure, Coinbase revealed that cybercriminals had bribed several of its customer service agents in India to gain access to internal systems over a period of several months.

在5月15日的披露中，Coinbase透露，网络犯罪分子贿赂了印度的几位客户服务代理商，以便在几个月的时间内访问内部系统。

The attackers reportedly stole user data including names, email addresses, Social Security numbers, driver’s license details, and partial banking information—affecting about 1.9 million users.

据报道，攻击者偷走了用户数据，包括姓名，电子邮件地址，社会保险号，驾驶执照详细信息和部分银行信息，影响约190万用户。

Following this disclosure, at least six separate lawsuits were filed between May 15 and May 16, accusing Coinbase of failing to protect sensitive information and responding inadequately to the breach.

在此披露之后，在5月15日至5月16日之间至少提起了六起单独的诉讼，指控Coinbase未能保护敏感信息并响应违规行为不足。

One complaint, filed by plaintiff Paul Bender in New York, focused on Coinbase's failure to "implement and maintain reasonable security safeguards."

原告保罗·本德（Paul Bender）在纽约提出的一项投诉，重点是Coinbase未能“实施和维护合理的安全保障”。

Bender's suit described Coinbase's response as "inadequate, fragmented, and delayed," adding that affected users were not promptly informed or offered proper support.

班德（Bender）的诉讼将Coinbase的回应描述为“不足，分散和延迟”，并补充说，受影响的用户未得到迅速告知或提供适当的支持。

The lawsuit also mentioned Coinbase's decision to cover the INDIA customer support agents' bribery with a $500,000 grant program for Indian women in STEM, which Bender's complaint described as a "PR stunt."

该诉讼还提到了Coinbase决定通过为STEM中的印度妇女提供500,000美元的印度妇女赠款计划来覆盖印度客户支持代理商的贿赂，Bender的投诉被描述为“公关特技”。

Calls for Audits, Data Deletion, and Accountability

呼吁审核，数据删除和问责制

A fifth lawsuit filed in California took a more aggressive stance, requesting that Coinbase purge all sensitive user data and hire third-party auditors to test its systems. Another case accused the exchange of unjust enrichment, claiming it failed to invest enough in cybersecurity.

在加利福尼亚提起的第五项诉讼采取了更具侵略性的立场，要求Coinbase清除所有敏感用户数据并聘请第三方审计师来测试其系统。另一个案件指责交换不公正的富集，声称它未能在网络安全上进行足够的投资。

Coinbase has not yet publicly responded to the new lawsuits. Instead, it directed media outlets to a blog post addressing the data breach, in which it confirmed refusing the $20 million ransom and pledged to reimburse impacted users.

Coinbase尚未公开回应新诉讼。取而代之的是，它将媒体媒体定向到涉及数据泄露的博客文章，其中确认拒绝了2000万美元的赎金，并承诺报销对用户的偿还。

In a U.S. Securities and Exchange Commission filing, Coinbase estimated reimbursement costs could range between $180 million and $400 million.

在美国证券交易委员会文件中，Coinbase估计的报销成本可能在1.8亿至4亿美元之间。

The company also confirmed that it fired a group of India-based customer service agents allegedly involved in social engineering attacks linked to the breach.

该公司还确认，它解雇了一组基于印度的客户服务代理商，据称参与了与违规有关的社会工程攻击。

COIN Price Swings as Legal Exposure Rises

当法律曝光率上升时，硬币价格波动

Following the May 15 disclosure, Coinbase (NASDAQ:COIN) stock fell 7%, reaching $244. It rebounded 9% the next day to close at $266, according to Google Finance.

5月15日披露后，Coinbase（NASDAQ：COIN）股票下跌7％，达到244美元。根据Google Finance的数据，第二天的反弹为9％，收于266美元。

The lawsuits come as Coinbase continues to be investigated by the U.S. Securities and Exchange Commission over 2021 user metrics.

诉讼是由美国证券交易委员会（Coinbase）继续调查的2021年用户指标。

The convergence of biometric suits and data breach fallout could create long-term

生物识别西服和数据泄露影响的融合可能会产生长期