On: Coinbase Breach Notification

[Animats]

The attack still goes on. Email today:

    Coinbase

    Coinbase <https://verify-customers.elastic-galileo.185-150-117-78.plesk.page/>
    Verify your email address
    In order to continue  using your Coinbase account, you need to reconfirm 
    your email address. To avoid service interruptions verify your email.
    Verify Email Address 
    <https://verify-customers.elastic-galileo.185-150-117-78.plesk.page/>

    If you did not sign up for this account you can ignore this email and the
    account will be deleted.

    Get the latest Coinbase App for your phone
    Coinbase iOS mobile bitcoin wallet
    <https://verify-customers.elastic-galileo.185-150-117-78.plesk.page/>
    Coinbase Android mobile bitcoin wallet
    <https://verify-customers.elastic-galileo.185-150-117-78.plesk.page/>

Whois info:

> whois plesk.page

    Domain Name: plesk.page
    Registry Domain ID: 41B85291E-PAGE
    Registrar WHOIS Server: whois.namecheap.com
    Registrar URL: https://www.namecheap.com/
    Updated Date: 2021-07-10T14:00:29Z
    Creation Date: 2020-03-18T03:06:27Z
    Registry Expiry Date: 2022-03-18T03:06:27Z
    Registrar: Namecheap Inc.
    Registrar IANA ID: 1068
    Registrar Abuse Contact Email: abuse@namecheap.com
    Registrar Abuse Contact Phone: +1.6613102107
    Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
    Registry Registrant ID: REDACTED FOR PRIVACY
    Registrant Name: REDACTED FOR PRIVACY
    Registrant Organization: Privacy service provided by Withheld for Privacy ehf
    Registrant Street: REDACTED FOR PRIVACY
    ...

Traceroute shows that site hosted by Hurricane Electric.

Anyone who lost money in this should sue Namecheap and Hurricane Electric. They will be stumbling all over themselves to tell your lawyers who their customer was, to avoid liability.

I don't even have a Coinbase account.

[koheripbal → Animats]

I've been targeted as well, and there is no way "social media" was a source for my coinbase account details, as the coinbase statement implies.

I am 90% certain Coinbase has suffered a broad breach of customer data that they have not disclosed yet.

[Thorrez → koheripbal]

Animats doesn't have a Coinbase account. Clearly the phisher got Animats's email from some other source than Coinbase.

https://haveibeenpwned.com/ says my data has been leaked ~25 times.