Coinbase承诺在罪犯贿赂客户服务代理商窃取数据后偿还客户

布莱恩·阿姆斯特朗（Brian Armstrong）在社交媒体帖子中说，罪犯贿赂了一些居住在美国以外的公司的客户服务代理

Coinbase is refusing to pay a ransom to hackers who threatened to release customer data after bribing some of the company’s customer service agents.

Coinbase拒绝向黑客支付赎金，这些黑客在贿赂某些公司的客户服务代理商后威胁要发布客户数据。

In a social media post on Monday, Coinbase chief executive Brian Armstrong said that criminals had bribed some of the company’s customer service agents who live outside the US to hand over personal data on customers, such as names, dates of birth and partial social security numbers.

Coinbase首席执行官布莱恩·阿姆斯特朗（Brian Armstrong）在周一的社交媒体帖子中说，犯罪分子贿赂了该公司的一些客户服务代理商，他们居住在美国以外的地区，向客户提供个人数据，例如姓名，出生日期和部分社会保险号。

“(The stolen data) allows them to conduct social engineering attacks where they can call our customers impersonating Coinbase customer support and try to trick them into sending their funds to the attackers,” Mr Armstrong said.

阿姆斯特朗说：“（被盗的数据）使他们能够进行社会工程攻击，他们可以打电话给我们的客户冒充Coinbase客户支持，并试图欺骗他们将资金汇款给攻击者。”

Social engineering is a popular hacking strategy, as humans tend to be the weakest link in any network. Many large companies have suffered hacks and data breaches as a result of such scams in recent years.

社会工程是一种流行的黑客策略，因为人类往往是任何网络中最弱的联系。近年来，由于这种骗局，许多大公司遭受了黑客攻击和数据泄露。

Coinbase did not specify how many customers had their data stolen or fell prey to social engineering scams. But the company did pledge to reimburse any who did.

Coinbase没有指定有多少客户被盗或沦为社会工程骗局的猎物。但是该公司确实保证偿还任何这样做的人。

In a filing with the Securities and Exchange Commission (SEC), Coinbase estimated that it would have to spend between 180 million dollars (£135.5 million) and 400 million dollars (£301 million) “relating to remediation costs and voluntary customer reimbursements relating to this incident”.

在向美国证券交易委员会（SEC）提交的文件中，Coinbase估计，它必须花费在1.8亿美元（1.355亿英镑）和4亿美元（3.01亿英镑）之间，“与补救成本和与此事件有关的自愿客户报销有关”。

The SEC filing said that the company had, “in previous months”, detected some of its customer service agents “accessing data without business need”. Those employees had been sacked, and the company said it stepped up its fraud prevention efforts.

SEC申请表示，该公司“在过去的几个月”中发现了一些客户服务代理“无需商务需要访问数据”。这些员工被解雇了，该公司表示加强了预防欺诈的工作。

For these would-be extortionists or anyone seeking to harm Coinbase customers, know that we will prosecute you and bring you to justice

对于这些潜在的勒索主义者或试图损害Coinbase客户的任何人，请知道我们将起诉您并将您绳之以法

Coinbase said it received an email from the attackers on Sunday demanding a ransom of 20 million dollars worth of bitcoin not to publicly release the customer data they had stolen.

Coinbase表示，它在周日收到了袭击者的电子邮件，要求价值2000万美元的比特币赎金，以免公开发布他们被盗的客户数据。

Mr Armstrong said the company was refusing to pay the ransom and would instead offer a 20 million dollar bounty for anyone who provided information that led to the attackers’ arrest.

阿姆斯特朗先生说，该公司拒绝支付赎金，而是为提供导致袭击者被捕的信息的任何人提供2000万美元的赏金。

“For these would-be extortionists or anyone seeking to harm Coinbase customers, know that we will prosecute you and bring you to justice,” Mr Armstrong said.

阿姆斯特朗说：“对于这些可能的勒索主义者或试图损害Coinbase客户的任何人，请知道我们将起诉您并将您绳之以法。”

“And know you have my answer.”

“知道你有我的答案。”