Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

Post by cyanydeez » Thu, May 15, 2025, 9:04 PM UTC

panarky wrote: post #194

modeless wrote: post #179

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

If you had any significant assets on Coinbase at any time prior to this breach, spear phishing is the least of your worries. Coinbase not only leaked your full name and address, they also gave up your balances, your transaction history, and images of your government identification. People with "significant" crypto balances are being assaulted on the street and in their own homes, and family members are being kidnappe…

Post by scarface_74 » Thu, May 15, 2025, 9:05 PM UTC

VectorLock wrote: post #190

modeless wrote: post #179

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

Post by coolcase » Thu, May 15, 2025, 9:05 PM UTC

OhMeadhbh wrote: post #7

I mean... wasn't coinbase sort of scammy to begin with? Several years ago I gave them some USD, turned it into BTC, saw the value of the BTC go up, but when I tried to cash out was told that wasn't a thing that was supported by their platform. Later I was told I could apply for a $399/year credit card and could partially pay off the balance with BTC sale proceeds. I'm sure this was all disclosed somewhere in the term…

Post by lxgr » Thu, May 15, 2025, 9:07 PM UTC

SimianSci wrote: post #185

thepasswordis wrote: post #56

The problem is that it seems like the data that leaked is also the data that would be used to do account recovery. And what that means is that 1) If you lose access to your account (through either your own fault, or coinbases fault) that the process of recovering it may not be so straightforward anymore. 2) Hackers can try to “recover” accounts now using this leaked info. This is a huge problem. What coinbase needs a…

The Crypto industry continues their speedrun of rediscovering all of the reasons for why the global financial system exists. What you've described is the same thing that many Crypto enthusiasts call a "Bank"

Post by ClumsyPilot » Thu, May 15, 2025, 9:08 PM UTC

scotty79 wrote: post #178

gkoberger wrote: post #149

Earlier quoted context omitted.

The no-reply is an interesting decision. I get how difficult it is to run a company like Coinbase (their biggest strength, centralized + customer support, is also what enables this social engineering), but feels like an odd choice.

no-reply is a good practice. No business should ever encourage their customers to reply to the emails they are sending out. That's what scammers do. To contact the company you should go to company website at the address you know (which shouldn't be given in email as well), log in and send a message through internal message system, possibly referring to the email that you recieved through a random code (those can be a…