Coinbase说，海外支持员工贿赂了近7万客户的数据

这家加密货币巨头确认，在周二向缅因州总检察长提交的通知中，将收到公司有关袭击的直接通信。

Coinbase has begun notifying 69,461 customers that their personal data was stolen in a December 26, 2024 breach, according to a notification filed with Maine's Attorney General on Tuesday.

根据缅因州总检察长周二提交的一份通知，Coinbase已开始通知69,461个客户，他们的个人数据在2024年12月26日的违规行为中被盗。

The crypto giant previously disclosed the attack in a May 15 Form 8-K filing with the Securities and Exchange Commission (SEC), estimating the cost of remediation to be between $180 million and $400 million.

这位加密货币巨头先前在5月15日向美国证券交易委员会（SEC）提交的8-K提交表格中披露了袭击，估计补救成本在1.8亿美元至4亿美元之间。

The company also stated that the criminals attempted to extort Coinbase for $20 million.

该公司还表示，罪犯试图以2000万美元的价格勒索Coinbase。

The filing with Maine's AG, which Coinbase is required to make as part of a state law enacted in 2023, provides an update on the actions taken since the initial announcement.

与缅因州的AG提交的文件，该文件必须作为2023年制定的州法律的一部分进行，并提供了自首次公告以来所采取的措施的最新信息。

This includes setting up a $20 million bounty for information that could lead to the attackers’ arrest and conviction, as well as pursuing all avenues available to the company to bring those responsible to justice.

这包括建立一个耗资2000万美元的赏金，以获取可能导致袭击者被捕和定罪的信息，并追求公司可用的所有途径，以将负责的人绳之以法。

Coinbase CEO Brian Armstrong also released a video message to customers on social media, in which he apologized for the impact on them and highlighted the company’s efforts to mitigate the incident.

Coinbase首席执行官布莱恩·阿姆斯特朗（Brian Armstrong）还在社交媒体上向客户发布了一条视频消息，他为对他们的影响而道歉，并强调了公司减轻事件的努力。

The filing confirms that the support staff involved in facilitating the data theft have all been fired by Coinbase, and their home country is not yet known.

该文件证实，参与促进数据盗窃的支持人员全部由Coinbase解雇，而他们的祖国尚不清楚。

However, active job boards show some support roles for the massive US cryptocurrency exchange are based in the UK, Ireland, India, the Philippines, and Japan.

但是，活跃的工作委员会显示了大规模的美国加密货币交易所的一些支持角色，位于英国，爱尔兰，印度，菲律宾和日本。

The expected cost of remediating the attack stands between $180 million and $400 million, Coinbase said in its SEC filing, although the full extent of the damage is still being investigated.

Coinbase在SEC提交的文件中表示，对袭击进行补救的预期成本在1.8亿至4亿美元之间，尽管仍在调查损失的全部范围。

Coinbase is also aware that some customers were successfully socially engineered by the attackers using the data stolen via the support staff.

Coinbase还意识到，一些客户使用支持人员被盗的数据成功地通过攻击者进行了社会设计。

To help mitigate this, customers who haven't yet been targeted are advised to remain vigilant against potential further criminal activity and targeting, as well as upping the security of their accounts.

为了帮助减轻这种情况，建议尚未被瞄准的客户保持警惕，以应对潜在的进一步犯罪活动和目标，并提高其帐户的安全性。

This includes implementing strong 2FA (hardware keys are the preferred choice here) and Withdrawal Allow Listing – a setting that allows withdrawals only from wallets explicitly trusted by the user.

这包括实现强2FA（硬件密钥是此处的首选选择）和提款允许列表 - 该设置仅允许从用户明确信任的钱包中提取提取。

Affected customers are also being offered one year of identity protection and credit monitoring services through IDX, which is standard practice following such events. Instructions on how to claim this are included in the letters Coinbase sent to users.

还通过IDX向受影响的客户提供了一年的身份保护和信用监控服务，这是此类活动之后的标准实践。有关如何要求这件事的说明包含在发送给用户的信件的信件中。