←back to thread

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

(www.cnbc.com)
410 points gpi | 1 comments | 15 May 25 15:52 UTC | HN request time: 0.328s | source
Show context
ArtTimeInvestor ◴[15 May 25 17:01 UTC] No.43996993[source]▶
From the Coinbase website:

https://www.coinbase.com/en-de/blog/protecting-our-customers...

    What they got

    - Name, address, phone, and email

    - Masked Social Security (last 4 digits only)

    - Masked bank‑account numbers and some bank account identifiers 

    - Government‑ID images (e.g., driver’s license, passport)

    - Account data (balance snapshots and transaction history)
Wow. Why does customer support staff have access to images of the user's passports?
replies(7): >>43997026 #>>43997046 #>>43997098 #>>43997560 #>>43998052 #>>43998305 #>>43999396 #
aianus ◴[15 May 25 18:48 UTC] No.43998052[source]▶
Who else would verify the user passports if not the customer support staff? Who verifies (and photocopies! in Asia and Europe) your passport at a hotel or car rental office?
replies(2): >>43998339 #>>43999087 #
1. wmf ◴[15 May 25 20:38 UTC] No.43999087[source]▶
A separate KYC department that verifies identity then immediately deletes the images?