Эксперты обнародовали новые подробности о крупнейшей утечке данных с Coinbase

cryptonews.ruPublished on 2025-08-16Last updated on 2025-09-17

Судебные документы раскрыли новые детали крупнейшей в истории Coinbase утечки данных, связанной с подрядчиком в Индии. Ашита Мишра, сотрудница индийского офиса компании TaskUs, обслуживавшей платформы, начиная с сентября 2024 года похищала конфиденциальные данные клиентов. В том числе номера социального страхования и банковские реквизиты.

Она передавала украденные фотографии аккаунтов хакерам, продавая из по $200 за штуку. Впоследствии преступники использовали эти данные, выдавая себя за сотрудников Coinbase, чтобы обманом выманивать криптовалюту у клиентов. Всего утечка затронула более 69 тыс. пользователей, а сама Coinbase оценила потенциальный ущерб до $400 млн.

Иск, поданный юридической фирмой Greenbaum Olbrantz, описывает софистицированную сеть внутри TaskUs, которая передавала клиентские данные преступникам. С сентября по январь Мишра вместе с соучастниками якобы привлекала других сотрудников TaskUs к схеме, а руководители и менеджеры подразделений могли быть в курсе происходящего. Когда была выявлена подозрительная активность, на телефоне Мишры оказались данные более 10 тыс. клиентов Coinbase. В некоторые дни она делала до 200 фотографий аккаунтов.

Данные суда подтверждают, что масштабная утечка началась раньше, чем Coinbase сообщала об этом публично. Компания ранее утверждала, что инцидент произошел в декабре 2024 года, но документы указывают на начало проблем еще в сентябре.

В Coinbase заявили, что сразу после поступления первой информации о кражах уведомили пострадавших пользователей и регуляторов, компенсировали потери клиентам, усилили контроль за подрядчиками и прекратила отношения с TaskUs. Биржа отказалась платить злоумышленникам и предложила вознаграждение $20 млн за информацию о преступниках. TaskUs пока не ответила на запросы о комментариях, а Мишра недоступна для связи.

В документах утверждается, что TaskUs уволила 226 сотрудников индийского офиса в январе 2025 года, пытаясь устранить последствия преступной схемы. В феврале компания также избавилась от HR-команды, расследовавшей проблему утечки данных.

Related Reads

Ali Martinez Predicts Dogecoin Breakout of Resistance at $0.177

Crypto analyst Ali Martinez suggests Dogecoin (DOGE) might be poised for a significant rally. He highlights that a buy signal from the Tom DeMark Sequential indicator on the monthly chart indicates a potential trend reversal. The current setup, featuring an inverted hammer and a forming Doji candlestick, is very similar to the pattern seen in August 2022, which preceded a 145% monthly surge. Martinez notes a key resistance level at $0.0813, where over 30 billion DOGE were previously traded. A sustained break and close above this level could signal the start of an upward move. Wealthy investors have accumulated over 430 million DOGE in the past week, showing bullish sentiment. If the pattern repeats, the next major resistance and potential target for the rally is $0.177. Currently, DOGE is trading sideways between $0.068 and $0.08, priced around $0.069.

cryptonews.ru29m ago

Ali Martinez Predicts Dogecoin Breakout of Resistance at $0.177

cryptonews.ru29m ago

Roman Storm Accuses Google and OpenAI in Connection with U.S. Department of Justice Ruling on Cryptocurrency Case

Roman Storm, founder of the cryptocurrency anonymization protocol Tornado Cash, convicted in August 2025 for conspiracy to operate an unlicensed money-transmitting business, has accused Google and OpenAI of facilitating North Korea's nuclear program. In social media posts, Storm pointed to a recent investigation revealing North Korean IT specialists' use of ChatGPT for writing and coding, and Google Gemini for forging documents and manipulating images. He argued that, under the same legal logic the U.S. Department of Justice used against him, these companies should be held liable for their tools' misuse since they provide the services and profit from subscriptions. Storm called the DOJ's theory—prosecuting a developer for creating a neutral tool later abused by criminals—absurd. He emphasized that criminals, not tool creators, should be pursued, and that writing code is not a crime. The Tornado Cash verdict sets a negative U.S. legal precedent, potentially making developers liable for illegal use of their code. Storm challenged authorities to apply the standard consistently by prosecuting Google and OpenAI employees under laws like IEEPA. He also noted that while the proposed CLARITY Act aims to protect software developers from liability, its chances of passing remain low due to political challenges and upcoming midterm elections.

cryptonews.ru29m ago

Roman Storm Accuses Google and OpenAI in Connection with U.S. Department of Justice Ruling on Cryptocurrency Case

cryptonews.ru29m ago

Bitwise CEO Believes the Era of Confrontation Between Banks and Bitcoin is Coming to an End

Wall Street and global financial institutions are accelerating their entry into the digital asset market, blurring the lines between traditional finance (TradFi) and decentralized finance (DeFi). According to Bitwise CEO Hunter Horsley, the era of being "long on bitcoin and short on bank stocks" is over, as financial giants pivot towards embracing crypto. Horsley noted two asset managers with over $1 trillion in assets approved crypto products this summer despite a bear market, signaling widespread institutional belief in the industry's future. Sygnum's CIO, Fabian Döri, observes a structural shift where banks have moved from resisting digital assets to actively creating, supporting, and distributing them through custody, tokenization, and regulated trading. Anchorage Digital CEO Nathan McCauley adds that his firm's client base increasingly reflects the convergence of traditional and crypto finance, with large institutions preferring to partner with specialized crypto infrastructure providers rather than building in-house systems. Major firms like Swissquote, DBS Bank, BBVA, BNY Mellon, and affiliates of Credit Suisse, Morgan Stanley, and Charles Schwab have entered the crypto space in recent years.

cryptonews.ru31m ago

Bitwise CEO Believes the Era of Confrontation Between Banks and Bitcoin is Coming to an End

cryptonews.ru31m ago

Attention: Important Token Unlock Events Expected for 17 Altcoins This Week — Here’s the Daily and Hourly List

Summary: Cryptocurrency Market Faces Token Unlock Events The crypto market struggled to recover last week, with Bitcoin poised to end the week down approximately 3%. While crypto underperformed, traditional U.S. indices like the S&P 500 hit record highs. Attention this week shifts to significant token unlock events across 17 altcoins, which are expected to be a major market focus. The schedule below lists key unlocks (all times UTC+3). The largest unlock by value involves Akedo (AKE), with $21.09 million (9.25% of market cap) on August 21 at 03:00. Kapibobo (PYBOBO) sees the largest percentage unlock at 21.20% ($5.13 million) on the same day. Other notable unlocks include LayerZero (ZRO) with $18.93 million (6.78%) on August 20 at 18:00, Kaito (KAITO) with $9.09 million (10.74%) on August 20 at 03:00, and Caldera (ERA) with $1.44 million (16.03%) on August 17 at 03:00. The list continues with unlocks for Puffin Penguins (PENGU), ZKsync (ZK), Lombard (BARD), Sapien (SAPIEN), Plume (PLUME), ETHGas (GWEI), Trusta.AI (TA), Aria.AI (ARIA), Reka, 0G (0G), Meteora (MET), and Space Coin (SPACE) through August 23, with unlock values ranging from $1.06 million to $4.23 million and representing 1.12% to 10.55% of their respective market capitalizations. The article concludes by stating this is not investment advice.

cryptonews.ru31m ago

Attention: Important Token Unlock Events Expected for 17 Altcoins This Week — Here’s the Daily and Hourly List

cryptonews.ru31m ago

Hardware Wallet Manufacturer SafePal Discloses Data Leak Affecting Nearly 40,000 Customers

SafePal, a hardware wallet manufacturer, has disclosed a data breach affecting approximately 39,798 customers. The incident occurred between March 2, 2025, and April 11, 2026, due to an authorization flaw in an order-tracking plugin. Exposed data includes names, email addresses, shipping addresses, phone numbers, and purchase details. The company emphasized that sensitive wallet credentials—such as seed phrases, private keys, and passwords—were not compromised. Bank account details, payment card numbers, and government IDs were also unaffected. The primary risk is now targeted phishing and scam attempts. Attackers may impersonate SafePal via emails, fake refund offers, fraudulent support channels, or malicious websites to steal user credentials. SafePal has patched the vulnerability, notified affected customers, and implemented enhanced security measures, including reducing personal data retention to 90 days and auditing order-processing systems. The firm advises users to never share their seed phrases or private keys, even if contacted by someone claiming to be from SafePal. While moving crypto assets is not necessary due to this breach, users who have already disclosed their credentials should consider their wallets compromised and transfer funds to a new, securely created wallet.

cryptonews.ru32m ago

Hardware Wallet Manufacturer SafePal Discloses Data Leak Affecting Nearly 40,000 Customers

cryptonews.ru32m ago

Trading

Spot
活动图片