Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

cnbc.com

Post reply on HN
Print view View original

491–500 of 550 posts

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#491

Post by skybrian »

_Algernon_ wrote: post #478
panarky wrote: post #194

Earlier quoted context omitted.

If you had any significant assets on Coinbase at any time prior to this breach, spear phishing is the least of your worries. Coinbase not only leaked your full name and address, they also gave up your balances, your transaction history, and images of your government identification. People with "significant" crypto balances are being assaulted on the street and in their own homes, and family members are being kidnappe…

How can I check if I am affected by this?

If you were affected, you should have gotten an email yesterday.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#492

Post by sameline »

VectorLock wrote: post #190
modeless wrote: post #179

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

Verizon (and I assume many other US carriers) offer junk call identification which your iPhone can block if you have ”Silence Junk Callers” toggled in Settings > Phone > Call Blocking & Identification.

https://support.apple.com/guide/iphone/block-or-avoid-unwant...

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#493

Post by nkrisc »

mlrtime wrote: post #453
gxs wrote: post #365

Earlier quoted context omitted.

And yet, Coinbase goes Scott free Someone, someone at that company should be going to prison for negligence

Can you point to a specific law that was broken where prosecutors have a chance at jail time, or is this a fantasy of yours?

I assume they mean that someone from the company going to prison for this would be a just outcome, not that a path to such an outcome exists today (it likely does not).

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#494

Post by ne0flex »

skybrian wrote: post #491
_Algernon_ wrote: post #478

Earlier quoted context omitted.

How can I check if I am affected by this?

If you were affected, you should have gotten an email yesterday.

I checked my email to see if I received anything and, interestingly, I received an email from Coinbase on April 14 that they're updating the User Agreement. The new terms only apply to disputes initiated by me or Coinbase after May 15, 2025. Timing seems suspect.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#495

Post by anton-c »

dowager_dan99 wrote: post #87
piva00 wrote: post #59

Earlier quoted context omitted.

> What coinbase needs are IRL offices where you can go and do things like account recovery, and where people trying to steal money can be caught and prosecuted (and makes a huge barrier for the overseas thieves who are usually doing this) That's just a bank.

Beyond the regulatory-dodge and crypto marketing explain to me how Coinbase is NOT a bank

I mean this isn't the criteria you're looking for but I can trade assets within coinbase's website. It looks like a stock trading platform. I don't for the record.

I don't think commodity, forex or stock trading is built into any bank interface but I don't have enough money to know for sure.

So it's different in that way I guess.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#496

Post by bdangubic »

AStonesThrow wrote: post #461
VectorLock wrote: post #386

Earlier quoted context omitted.

Theres plenty of situations where this doesn't work. If you're called from a business central line and you don't know their extension you just call back and get the normal call tree which can take you forever to get through. Or if you're on the "cancellation list" for an appointment if they can't get through to you, they don't wait for you to call back, they just go on to the next person to schedule in their open slo…

Taxi cab dispatchers will do this for sure. They do callbacks to “confirm” your ride, especially when busy, because if you don’t answer, they simply drop your request on the sticky office floor.

this is a loss of business for them, not my problem. it is 2025, if they do not have map where i can track where they are etc.. imma not going to be using that service...

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#497

Post by arandomusername »

AStonesThrow wrote: post #227
thepasswordis wrote: post #184

Earlier quoted context omitted.

Is there anything crypto does that paper currency doesn’t?

"Cryptocurrency" is a misnomer, because none of them are actual currencies . Cryptocurrencies are classified, for now, as securities. Currency is currency and cryptocurrency is not. So please do not attempt to compare apples to oranges here. https://en.wikipedia.org/wiki/Security_(finance) If you wish to compare cryptosecurities to other securities, then do that, but don't try to act like it is some sort of future ut…

Cryptocurrencies are not classified as securities. Bitcoin and Ethereum, the largest cryptocurrencies, were both declared as non securities by the SEC.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#498

Post by anton-c »

suzzer99 wrote: post #217
knowitnone wrote: post #189

Earlier quoted context omitted.

except banks staff can easily be bribed too. There is plenty of bank fraud happening.

If my bank money gets stolen from me via fraud (unless I literally just Zelle the scammer), I get it back. That's the big difference.

I know it's the massive exception but I was reimbursed when the exchange that tried to rugpull its users felt legal pressure. Things have changed slightly over the years - don't get me wrong, scams are still rampant.

It's been ages since I was in college and had an overdraft or some other bs bank related fee, but the bank manages to 'scam' you legally too. I'm just playing devils advocate and sharing an anecdote, I'm minimally involved in crypto anymore.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#499

Post by arandomusername »

stringsandchars wrote: post #418
lm28469 wrote: post #408

Earlier quoted context omitted.

> •Name, address, phone, and email;\ > blackmail each individual user Blackmail would be the least of my worries, in France we had at least five kidnappings/attempted kidnappings related to crypto investors since the beginning of the year.

This may seem callous, but isn't a large point of crypto that you are 'free' from the shackles imposed by the State? And I guess that includes protection from criminals by the oppressive forces of the State (aka the police). In which case being kidnapped and having your fingers sent to your family is an integral part of your 'freedom'.

You can argue that once you are 'free' to own guns, defend yourself, and seek revenge. The state limits your ability to protect yourself, so it has to assume that responsibility.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#500

Post by anton-c »

Ozarkian wrote: post #171
rtkwe wrote: post #93

Earlier quoted context omitted.

I also like 'last 4 digits only' as if that's not the most important parts and the part so many places use to validate your identity, the first 5 are just area and group so they're not exactly random.

Everyone's social security number is available. If you go download the leak referring to in this HN post [1], your SSN is certainly in it. Mine was, everyone in my family's was, almost all of my friends' were. The world needs to stop pretending that SSNs are secret. They aren't. [1] https://news.ycombinator.com/item?id=41248104

Does it require the skills of using powershell to open and search? I'm very curious but am not a coder, I do audio and graphic design. That being said I've copy pasted pieces of python, tailored it to my use and made it work.*

I'm just very curious to check for myself and my family.

*hah, here's me making it work https://www.youtube.com/watch?v=PMeRFnkHgBc&t=97s

Post reply on HN