Security researcher calls BS on Coinbase breach timeline
Briefly

Security researcher calls BS on Coinbase breach timeline
"The researcher, Jonathan Clark, says he knows this for a fact because he reported the attack to Coinbase on January 7 after the criminals tried to scam him. According to Clark, Coinbase's Head of Trust and Safety Brett Farmer responded to his "comprehensive security report" the same day he emailed it to the company's security@ address. In a blog about the incident, Clark says Farmer replied: "This report is super robust and gives us a lot to look into. We are investigating this scammer now.""
"As a refresher: In May, Coinbase disclosed the breach to the US Securities and Exchange Commission. At the time, the company said the data thieves stole 69,461 people's private and financial information, including their name, date of birth, the last four digits of their Social Security number, address, phone number, email address, driver's license number, passport number, national identity card number, transaction history, balance, transfer, and the date customers opened their accounts."
A security breach at Coinbase occurred on December 26, 2024, exposing 69,461 customers' personal and financial details. The compromised data included names, dates of birth, partial Social Security numbers, addresses, contact details, identity documents, account opening dates, transaction history, and balances. The attackers attempted to extort $20 million. A report was sent to Coinbase security@ on January 7 after scammers used detailed customer data to target an individual, and a Head of Trust and Safety reply acknowledged the report and an investigation. Follow-up messages received no substantive response before the May disclosure to the SEC.
Read at Theregister
Unable to calculate read time
[
|
]