Coinbase Experiences Crypto-Stealing Scam After Customer Data Stolen

Strategic Insights -

Coinbase, the largest U.S. cryptocurrency exchange, announced on Thursday that it had been a victim of a crypto-stealing scam, in which hackers had obtained personal data on customers and were demanding a $20 million payment not to publicly release the information. The stolen data includes customers' names, dates of birth, and partial social security numbers, which hackers plan to use for social engineering attacks. According to CEO Brian Armstrong, the hackers bribed some of the company's customer service agents who live outside the U.S. to hand over the sensitive information.

Key Takeaways:

  • Coinbase reported that hackers had stolen personal data on its customers, including names, dates of birth, and partial social security numbers.
  • The stolen data is being used to conduct social engineering attacks, where hackers impersonate Coinbase customer support and trick customers into sending their funds to the attackers.
  • Coinbase fired some of its customer service agents who had accessed customer data without business need and stepped up its fraud prevention efforts.
  • The company estimated that it will have to spend between $180 million to $400 million on remediation costs and customer reimbursements.
  • Coinbase received an email from the attackers demanding a ransom of $20 million worth of bitcoin to not publicly release the stolen customer data.
  • The company is offering a $20 million bounty for information that leads to the arrest of the attackers.

Statistics:

  • Estimated remediation costs and voluntary customer reimbursements: $180 million to $400 million
  • Amount of bitcoin demanded by attackers as ransom: $20 million
  • Size of Coinbase's customer base: Not specified
  • Number of customers potentially affected by the data breach: Not specified

Sources:

  • "Coinbase CEO: Hackers Stole Customer Data to Conduct Social Engineering Attacks" (Associated Press)