“70,000 Coinbase users were leaked” — Coinbase never gave that figure. SlowMist says “more than 70,000” people may have had their contact details exposed, while the exchange only mentioned a “small number” of customers.

what we know so far:
— the breach was at Amplitude, an analytics contractor for the exchange, not Coinbase itself
— contact details: email and phone number. Passwords, transaction history, and funds are safe, the exchange says
— Daishin, a Korean brokerage: data on 38,490 customers leaked; account numbers and phone numbers were encrypted
— Bithumb: someone outside the company accessed its internal messenger. Whether customer data was in there is unclear; they’re investigating

long story short, nobody made off with money from the vault. But an email plus a phone number is exactly what you need for phishing and SIM swapping.

minimum precautions: a separate email for your exchange account, a passkey instead of SMS, a withdrawal whitelist, and a PIN with your mobile carrier.

A separate email for every exchange — paranoia or standard practice? I vote standard practice.

I’m watching to see whether Coinbase gives its own figure instead of “more than 70,000.”

#coinbase #security