←back to thread

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

(www.cnbc.com)
410 points gpi | 3 comments | 15 May 25 15:52 UTC | HN request time: 0.433s | source
Show context
olalonde ◴[16 May 25 10:16 UTC] No.44003629[source]▶
Brian Armstrong (Coinbase CEO) posted a video about this today: https://x.com/brian_armstrong/status/1922967787309256807
replies(1): >>44003790 #
1. koakuma-chan ◴[16 May 25 10:47 UTC] No.44003790[source]▶
"But customer support agents do have access to personal information like name, date of birth, address, et cetera"

Apparently "et cetera" includes photos of my ID? Why do they even keep it?

replies(2): >>44003827 #>>44004156 #
2. cmcaleer ◴[16 May 25 10:52 UTC] No.44003827[source]▶
The more alarming part for me is that, given the scale of the breach, there was clearly some way for this CS access to (a) query and download data from a database and (b) exfil that data in bulk. Where on earth were the controls?
3. olalonde ◴[16 May 25 11:39 UTC] No.44004156[source]▶
They are required to by law (thanks to AML regulations).