http://www.reddit.com/r/Bitcoin/comments/2uo8wb/a_message_from_the_coinbase_security_team/
This morning we discovered a phishing attack that came via email, requesting users to click to accept New User/Service Agreement.
This prompted users to sign in to their accounts and authorize a malicious application to remove bitcoin from their Coinbase Wallet.
We found this malicious application relatively quickly, and we shut it down. Only a small number of users were affected, and we will be reaching out to them directly.
We will be reimbursing the affected users the bitcoin that they lost, while we continue the investigation.
To stop this from happening again, we are reassessing our API/application approval process, as well as re-visiting the limits of money that can be sent over an application. Lastly, we began to talk about how we can proactively reach out customers and educate them on how to use their Coinbase Vaults as a more secure way of storing their bitcoin.
We appreciate the feedback and patience with this matter.
The Coinbase Team
UPDATE: Adding link to the Coinbase Community https://community.coinbase.com/t/a-message-from-the-coinbase-security-team/476
