Strange mail from Coinbase...

[alani123]

I got those too. I just loged into coinbase and decline a coule of payment requests. I wonder where they got my email from.

Sure you logged into coinbase and not into a lookalike phishing site?

Onkel Paul

Yup. The links were real. Linking to the actualcoinbase.com domain. And besides that, any withdrawal would have to be confirmed through my email. Also access to my account from a diferent IP would send a SMS message to my phone for verification.

[CurbsideProphet]

I received 3 payment requests similar to you guys from mailinator. I talked to support and they said somehow they got our email and just can use that to send requests. Just decline the requests and no harm done. When I first logged in i was a little nervous but no big deal they spammed out coinbase like they would your email

My advice would be to not deny the payment just yet, you might want to leave it sit.  What they're probably doing is phishing to see who has a Coinbase account and/or who is active on their account.  If you deny the payment it will let them know that you have an active Coinbase account and will likely lead to more spam.  Just my thoughts.  So long as you don't pay them, having the request sit shouldn't do anything.  Coinbase should be the ones removing.

[SackofBits]

I received 3 payment requests similar to you guys from mailinator. I talked to support and they said somehow they got our email and just can use that to send requests. Just decline the requests and no harm done. When I first logged in i was a little nervous but no big deal they spammed out coinbase like they would your email

My advice would be to not deny the payment just yet, you might want to leave it sit.  What they're probably doing is phishing to see who has a Coinbase account and/or who is active on their account.  If you deny the payment it will let them know that you have an active Coinbase account and will likely lead to more spam.  Just my thoughts.  So long as you don't pay them, having the request sit shouldn't do anything.  Coinbase should be the ones removing.

+1!

[pr0d1gy]

http://blog.coinbase.com/post/81407694500/update-on-coinbase-data-security

[r3wt]

I received 3 payment requests similar to you guys from mailinator. I talked to support and they said somehow they got our email and just can use that to send requests. Just decline the requests and no harm done. When I first logged in i was a little nervous but no big deal they spammed out coinbase like they would your email

some big name will have been a target of this, and will sue the pants off of coinbase, and they will likely win a dispute. it doesn't matter what your terms of service say in the financial payments industry, the onus is on you(the company) to safeguard customer data, including a person's legal name.

you can't just have a form where anyone can enter an email and reveal the account holders legal name. that's lunacy. what on earth were they thinking? this isn't facebook, this is finance.

[alani123]

Sue coinbase for someone knowing the name asociated with their email? Coinbase even allows you to use a fake username to be displayied in public. And even if they do get the name associated with the accounts, that about all the information they're going to get. Coinbase does off chain transactions and you can't track a user's transaction data.

Maybe the fact that emails can be collected for phising is bad but there was no sensible user data leaked.

[C10H15N]

Rather poor PR to throw a POS TOS in customer's faces as an excuse for this debacle.

Arrogance is obviously exceeding intelligence.  

some big name will have been a target of this...

One can hope some of the large Coinbase private investors were included in the spamming. 

[clownius]

Considering people who have not used Coinbase and dont have an account there are getting these emails....

WTF makes you think its Coinbases fault that names and email addresses leaked?  Its more probable they got the details from another source