On: Update on Coinbase Data Security

[kenrikm]

"It’s clear there was no data breach because no other user information is provided."

That strikes me as an assumption. There's no way for them to know that there was no breach based off of the fact that no other information was provided. There are other ways to know that you were not breached, this one comes across as a very weak / naive reason.

[meowface → kenrikm]

Even if certain users were in fact somehow phished or deceived by this, it would be a stretch to say that is a "breach".

Regardless, I do think Coinbase should try to prevent user enumeration.