←back to thread

685 points jclarkcom | 1 comments | | HN request time: 0s | source
Show context
AlexErrant ◴[] No.45948315[source]
Here's a Reuters report from June 2, which includes a link to a May 14 SEC filing:

> Cryptocurrency exchange Coinbase knew as far back as January about a customer data leak at an outsourcing company connected to a larger breach estimated to cost up to $400 million, six people familiar with the matter told Reuters.

https://www.reuters.com/sustainability/boards-policy-regulat...

> On May 11, 2025, Coinbase, Inc., a subsidiary of Coinbase Global, Inc. (“Coinbase” or the “Company”), received an email communication from an unknown threat actor claiming to have obtained information about certain Coinbase customer accounts, as well as internal Coinbase documentation, including materials relating to customer-service and account-management systems.

https://www.sec.gov/Archives/edgar/data/1679788/000167978825...

replies(2): >>45948341 #>>45948492 #
j-bos ◴[] No.45948492[source]
> an outsourcing company

From what I've seen, this is going to be a common subheading to a lot of these stories.

replies(1): >>45950970 #
johnebgd ◴[] No.45950970[source]
Business process outsourcing firm most likely (BPO). They get contracts for every kind of company you’ve ever heard of, lie about their cybersecurity practices, and then rebrand if they get caught.
replies(1): >>45953303 #
ChrisMarshallNY ◴[] No.45953303{3}[source]
Sound like rich targets for hacking.
replies(1): >>45960730 #
1. Hobadee ◴[] No.45960730{4}[source]
Why go through the time and effort of hacking them when you can apparently just slip them some money and get what you want?