Coinbase warns of $400m hit after data breach


Crypto exchange Coinbase has disclosed a significant cyber attack that could cost the company between $180m (£135m) and $400m (£300m), after hackers breached account data belonging to a “small subset” of its users.

The news sent shares down three per cent in pre-market trading on Thursday. Coinbase said it received an email from an unknown threat actor on 11 May, claiming access to sensitive customer details and internal company documents. The company has confirmed that the attackers accessed names, addresses, and emails, but did not obtain login credentials and passwords.

Read more…
Source: City A.M. News


Sign up for our Newsletter
The latest news and insights delivered right to your inbox.


Related:

  • Hackers are targeting your smartphone as way into the company network

    June 4, 2020

    The number of phishing attacks targeting smartphones as the entry point for attempting to compromise enterprise networks has risen by more than a third over the course of just a few months. Analysis by cybersecurity company Lookout found that there’s been a 37% increase in mobile phishing attacks worldwide between the last three months of 2019 and the first ...

  • Tycoon Ransomware Banks on Unusual Image File Tactic

    June 4, 2020

    A new ransomware strain called Tycoon is seeking to wheel and deal its way into the Windows and Linux worlds, using a little-known Java image format as part of its kill chain. The ransomware is housed in a trojanized version of the Java Runtime Environment (JRE), according to researchers at BlackBerry Cylance, and has been around ...

  • U.S. Nuclear Contractor Hit with Maze Ransomware, Data Leaked

    June 4, 2020

    A U.S. military contractor involved in the maintenance of the country’s Minuteman III nuclear arsenal has been hit by the Maze ransomware, according to reports – with the hackers making off with reams of sensitive information. The company, Westech International, has a range of contracts with the military for everything from ongoing evaluation for the ballistic ...

  • Lemon Duck Cryptominer Spreads through Covid-19 Themed Emails

    June 3, 2020

    Malware authors continue to take advantage of the coronavirus pandemic to propagate threats. In a recent related campaign, we have come across a PowerShell script (mailer script) that distributes the Lemon Duck cryptominer through a new propagation method: Covid-19-themed emails with weaponized attachments. These emails are delivered to all Microsoft Outlook contacts of the user of a ...

  • Ransomware gangs team up to form extortion cartel

    June 3, 2020

    Ransomware gangs are teaming up to extort victims through a shared data leak platform, and the exchange of tactics and intelligence. In November 2019, the Maze Ransomware operators transformed ransomware attacks into data breaches after they released unencrypted data of a victim who refused to pay. Soon after, they launched a dedicated “Maze News” site used to shame their unpaid victims ...

  • REvil ransomware creates eBay-like auction site for stolen data

    June 2, 2020

    ​The operators of the REvil ransomware have launched a new auction site used to sell victim’s stolen data to the highest bidder. REvil, otherwise known as Sodinokibi, is a ransomware operation that breaches corporate networks using exposed remote desktop services, spam, exploits, and hacked Managed Service Providers. Once established on a network, they quietly spread laterally through the company while stealing ...