←back to thread

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

(www.cnbc.com)
410 points gpi | 3 comments | 15 May 25 15:52 UTC | HN request time: 0.413s | source
Show context
ArtTimeInvestor ◴[15 May 25 17:01 UTC] No.43996993[source]▶
From the Coinbase website:

https://www.coinbase.com/en-de/blog/protecting-our-customers...

    What they got

    - Name, address, phone, and email

    - Masked Social Security (last 4 digits only)

    - Masked bank‑account numbers and some bank account identifiers 

    - Government‑ID images (e.g., driver’s license, passport)

    - Account data (balance snapshots and transaction history)
Wow. Why does customer support staff have access to images of the user's passports?
replies(7): >>43997026 #>>43997046 #>>43997098 #>>43997560 #>>43998052 #>>43998305 #>>43999396 #
rtkwe ◴[15 May 25 17:06 UTC] No.43997046[source]▶
I also like 'last 4 digits only' as if that's not the most important parts and the part so many places use to validate your identity, the first 5 are just area and group so they're not exactly random.
replies(1): >>43998202 #
1. Ozarkian ◴[15 May 25 19:02 UTC] No.43998202[source]▶
Everyone's social security number is available. If you go download the leak referring to in this HN post [1], your SSN is certainly in it. Mine was, everyone in my family's was, almost all of my friends' were.

The world needs to stop pretending that SSNs are secret. They aren't.

[1] https://news.ycombinator.com/item?id=41248104

replies(2): >>43998713 #>>44005929 #
2. Kiro ◴[15 May 25 19:57 UTC] No.43998713[source]▶
The world has stopped pretending a long time ago. In my country SSN is public information.
3. anton-c ◴[16 May 25 14:27 UTC] No.44005929[source]▶
Does it require the skills of using powershell to open and search? I'm very curious but am not a coder, I do audio and graphic design. That being said I've copy pasted pieces of python, tailored it to my use and made it work.*

I'm just very curious to check for myself and my family.

*hah, here's me making it work https://www.youtube.com/watch?v=PMeRFnkHgBc&t=97s