Live data from Hacker News

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

cnbc.com

51–60 of 550 posts

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#51
post #48

Earlier quoted context omitted.

How can customer support operate without knowing anything about the customer?

Isn't the whole point of crypto to keep PII out of it completely? If not, what is all this non-sense for exactly, other than the typical goals of pyramid schemes?

Unfortunately government regulation does not make that possible for exchanges. It also is not the point of crypto.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#52
post #17

The article keeps saying overseas employees or contractors, but isn't more specific on who Coinbase entrusted with this sensitive customer PII. The bottom line is Coinbase didn't adequately secure sensitive customer information, and it was leaked. Not, "Gosh, 'overseas' people, what can ya do?"

Bribes are one thing, but threats could also happen. This is a big part of the reason why I absolutely hate entities that think residential addresses should be public record.

This is a precedent to Coinbase employees getting physical threats at their door just because e.g. some voter registration, utility company, bank, credit card, or court record decided to release their name and addresses on the internet. People could show up at some Coinbase software engineers' apartment doors with guns demanding they send BTC to arbitrary addresses.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#53
post #48

Earlier quoted context omitted.

How can customer support operate without knowing anything about the customer?

Isn't the whole point of crypto to keep PII out of it completely? If not, what is all this non-sense for exactly, other than the typical goals of pyramid schemes?

Coinbase is a bridge between digital currencies and the traditional world.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#54
post #48

Earlier quoted context omitted.

How can customer support operate without knowing anything about the customer?

Isn't the whole point of crypto to keep PII out of it completely? If not, what is all this non-sense for exactly, other than the typical goals of pyramid schemes?

[deleted]

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#55

Saved dimes on customer support, lost $400m. It's hard to not believe in Karma sometimes.

It will happen (at least attempted) with on-shore support staff too, My next door neighbour used to work for a UK high street bank and even there support staff were approached, with some of them first befriended, and eventually bribed in to passing along PII. No doubt it happens in the US too. Just costs the bad guys more.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#56
The problem is that it seems like the data that leaked is also the data that would be used to do account recovery.

And what that means is that

1) If you lose access to your account (through either your own fault, or coinbases fault) that the process of recovering it may not be so straightforward anymore.

2) Hackers can try to “recover” accounts now using this leaked info.

This is a huge problem. What coinbase needs are IRL offices where you can go and do things like account recovery, and where people trying to steal money can be caught and prosecuted (and makes a huge barrier for the overseas thieves who are usually doing this)

The only solution here is: hardware 2 factor like yubikeys.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#57
post #48

Earlier quoted context omitted.

How can customer support operate without knowing anything about the customer?

Isn't the whole point of crypto to keep PII out of it completely? If not, what is all this non-sense for exactly, other than the typical goals of pyramid schemes?

The main point of crypto IMO is to have a large-denomination bearer asset.

This is overlooked most places but if you examine around the time the FATF finally pretty much eliminated bearer bonds, bearer stocks, and large bank notes was exactly the time crypto really took off.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#58
post #48

Earlier quoted context omitted.

How can customer support operate without knowing anything about the customer?

Isn't the whole point of crypto to keep PII out of it completely? If not, what is all this non-sense for exactly, other than the typical goals of pyramid schemes?

Not if you are dealing with a regulated exchange that facilitates fiat money transactions.

You can receive crypto privately to your own wallet without sharing PII, without any exchange.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#59

The problem is that it seems like the data that leaked is also the data that would be used to do account recovery. And what that means is that 1) If you lose access to your account (through either your own fault, or coinbases fault) that the process of recovering it may not be so straightforward anymore. 2) Hackers can try to “recover” accounts now using this leaked info. This is a huge problem. What coinbase needs a…

> What coinbase needs are IRL offices where you can go and do things like account recovery, and where people trying to steal money can be caught and prosecuted (and makes a huge barrier for the overseas thieves who are usually doing this)

That's just a bank.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#60
post #24
post #17

The article keeps saying overseas employees or contractors, but isn't more specific on who Coinbase entrusted with this sensitive customer PII. The bottom line is Coinbase didn't adequately secure sensitive customer information, and it was leaked. Not, "Gosh, 'overseas' people, what can ya do?"

It's probably hard to keep call-center workers bribe-proof.

[flagged]
Post reply on HN