Coinbase says that the “rogue” support agents helped steal the customer’s data

Coinbase says Internet criminals are “sprayed and recruited” for workers to help steal customer data and deceive the victims to send money to the attackers. As a result of the attack, bad actors obtained names, addresses, phone numbers, government identifiers, account data, and partial social security numbers for a “small sub -group of users”. According to a blog on Thursday.

In a file Securities and Stock Exchange CommitteeThe encryption exchange said it had received an email on May 11 from a threat actor who claimed to have information about some Coinbase accounts. The bad actor demanded $ 20 million in exchange for not exposing information publicly, but Coinbase refused to pay.

Coinbase works with the application of the law to investigate the accident. It also “immediately ended the employees concerned.” The company “will press criminal charges.”

The exchange of encryption is noted that the attackers did not get the entry login data, 2FA symbols or private keys, and they were unable to access any account or governors of Coinbase. Coinbase says it may spend $ 180 million to $ 400 million to pay affected customers. It also provides a $ 20 million reward to anyone who provides information that leads to arrest.

The company says in its blog publication: “The fraudsters – those related to this incident or not – as Coinbase employees and they are trying to press you to move your money,” the company says in its blog post. “Remember that Coinbase will never order your password, 2FA symbols, to you to transfer assets to a address, account, cellar, a specific portfolio, or a portfolio.”