Connect with us

Business

Coinbase faces lawsuit over alleged breaches of Illinois biometric privacy law

Published

on

Coinbase is under legal scrutiny as a group of Illinois users filed a class-action lawsuit on May 13, alleging the cryptocurrency exchange violated the state’s Biometric Information Privacy Act (BIPA). The plaintiffs—Scott Bernstein, Gina Greeder, and James Lonergan—claim that Coinbase collected and shared users’ facial biometric data without obtaining informed written consent, as mandated by BIPA.

The lawsuit centers on Coinbase’s Know Your Customer (KYC) procedures, which require users to upload a government-issued photo ID and a selfie. These images are processed by third-party facial recognition software to extract facial geometry. The plaintiffs allege that Coinbase failed to inform users about the collection, storage, sharing, and retention schedule of their biometric data.

Furthermore, the complaint asserts that Coinbase shared this biometric data with third-party verification vendors, including Jumio, Onfido, Au10tix, and Solaris, without users’ consent. The plaintiffs argue that Coinbase directed these vendors to use facial recognition software for user verification, thereby collecting biometric data in violation of BIPA.

The plaintiffs also highlight that Coinbase does not publicly provide a retention schedule or guidelines for permanently destroying biometric identifiers, as specified by BIPA.

In addition to the BIPA violations, the lawsuit includes a claim under the Illinois Consumer Fraud and Deceptive Business Practices Act. The plaintiffs are seeking statutory damages of $5,000 per willful or reckless violation and $1,000 per negligent violation, along with injunctive relief and litigation costs.

This legal action follows a previous attempt by the plaintiffs to resolve the matter through arbitration. According to the complaint, over 10,000 individuals filed demands for arbitration with the American Arbitration Association (AAA), which were dismissed after Coinbase allegedly refused to pay the required arbitration fees.

Coinbase has yet to respond publicly to the allegations. The case underscores the growing legal challenges faced by companies handling biometric data, particularly under stringent state laws like Illinois’ BIPA.

Business

Dubai regulator clarifies real-world asset tokenization rules

Published

on

Dubai’s Virtual Asset Regulatory Authority (VARA) has unveiled updated guidelines that provide a comprehensive framework for the tokenization of real-world assets (RWAs), marking a significant advancement in the emirate’s digital asset regulatory landscape.

The revised Rulebook, released on May 19, 2025, introduces clear provisions for the issuance and secondary market trading of Asset-Referenced Virtual Assets (ARVAs). These tokens represent direct or indirect ownership of tangible assets such as real estate, commodities, or income-generating instruments. The new regulations aim to transition RWA tokenization from a conceptual stage to a regulated practice within Dubai and the broader United Arab Emirates.

Legal experts highlight that the updated rules address previous challenges faced by security token offerings (STOs), which struggled due to regulatory ambiguities and limited market infrastructure. Under the new framework, regulated exchanges and broker-dealers in Dubai are authorized to distribute and list ARVA tokens, providing a structured pathway for asset tokenization.

Issuers of ARVA tokens are required to obtain a Category 1 Virtual Asset Issuance license, submit a comprehensive white paper and risk disclosure statement, and maintain a paid-up capital of at least 1.5 million UAE dirhams (approximately $408,000) or 2% of the reserve assets held. Additionally, issuers must undergo monthly independent audits and adhere to ongoing supervisory oversight.

The implementation of these guidelines positions Dubai as a leading jurisdiction in the regulation of digital assets, offering clarity and structure that could attract institutional participation and foster innovation in the tokenization of real-world assets.

Continue Reading

Business

Microsoft takes legal action against infostealer Lumma

Published

on

Microsoft has initiated a comprehensive legal and technical offensive against Lumma Stealer, a notorious information-stealing malware responsible for compromising nearly 400,000 Windows systems worldwide between March and May 2025. This concerted effort, in collaboration with international law enforcement agencies, marks a significant stride in combating cybercrime.

On May 21, a federal court in Georgia authorized Microsoft’s Digital Crimes Unit (DCU) to dismantle the infrastructure supporting Lumma Stealer. Consequently, approximately 2,300 domains integral to the malware’s operations were taken down, blocked, or suspended. Additionally, the U.S. Department of Justice seized Lumma’s central command structure and disrupted marketplaces facilitating the malware’s distribution.

Lumma Stealer, also known as LummaC2, has been active since 2022, evolving through multiple iterations to enhance its capabilities. The malware is designed to extract sensitive data from web browsers and applications, including passwords, credit card information, bank account details, and cryptocurrency wallet credentials.

The takedown operation was bolstered by the efforts of Europol’s European Cybercrime Center and Japan’s Cybercrime Control Center, which facilitated the suspension of locally based Lumma infrastructure. Microsoft’s collaboration with these agencies underscores the importance of international cooperation in addressing the growing threat of cybercrime.

Despite this significant disruption, cybersecurity experts caution that the threat from infostealers like Lumma remains high. The malware’s effectiveness and widespread adoption make it a preferred tool for cybercriminals and nation-state actors alike.

Microsoft’s decisive action against Lumma Stealer highlights the evolving nature of cyber threats and the critical need for robust cybersecurity measures. The company’s ongoing commitment to protecting users and dismantling malicious networks serves as a model for industry-wide efforts to combat cybercrime.

Continue Reading

Business

BlackRock’s Bitcoin ETF notches 2-week high inflow as BTC nears $112K

Published

on

BlackRock’s iShares Bitcoin Trust (IBIT) experienced a significant surge in investor interest on May 21, recording a net inflow of $530.6 million—the highest since May 5. This influx coincided with Bitcoin’s price climbing to $111,897, nearing its all-time high.

The trading volume for IBIT also reached levels not seen since January, indicating heightened market activity. Notably, the ETF acquired 4,931 BTC in a single day, surpassing the 450 BTC mined during the same period. Overall, U.S. spot Bitcoin ETFs collectively garnered $607.1 million in inflows, with Fidelity’s Wise Origin Bitcoin Fund (FBTC) contributing $23.5 million.

Bloomberg ETF analyst Eric Balchunas described the trend as a “classic feeding frenzy,” attributing it to Bitcoin’s recent rally. He noted that ETF trading volumes are expected to double their average flows.

Industry experts suggest that the momentum in Bitcoin ETF investments may continue, especially if macroeconomic factors, such as potential interest rate cuts by the Federal Reserve, come into play. Jeff Mei of BTSE highlighted that investors are increasingly turning to Bitcoin ETFs, which have seen $3.6 billion in net inflows in May alone.

Continue Reading

Trending

Copyright © 2025 cryptonews.lk