Coinbase’s “Data Plumber” Denies All Allegations
Coinbaseâ€™s â€œdata plumberâ€� denies storing usersâ€™ login credentials in plain text, and all the other allegations in a new class action complaint.
A source close to Plaid, the company that serves as a â€œdata plumberâ€� to Coinbase, Robin Hood, Squareâ€™s Cash App and many others, denied all allegations of the class action complaint that was recently filed.
The entire complaint hinges on the allegation that Plaid sells user data to the â€œhighest bidderâ€�. A Plaid spokesperson called this allegation â€œbaselessâ€�.Â
A money-making operation?
A source close to Plaidâ€™s legal team, speaking to Cointelegrpah on the condition of anonymity, reaffirmed that the company has never sold user data in any shape or form. They also opined that this is just a â€œmoney-making operationâ€� for the lawyers:
â€œThey see companies in a particular position, like getting acquired or having an investment. And that’s a big money-making operation for them.â€�
This statement refers to the fact that Plaid is in the process of being acquired by Visa â€” a deal which has not yet been finalized. This puts Plaid in a vulnerable position.
Visa did not respond to Cointelegraphâ€™s request for comment.
PNC Bank blocked Plaid in 2019
The complaint alleged that Plaid collects data going back five years and going forward â€œin perpetuityâ€�. They also allegedly collect health-related data without storing it in compliance with the Health Insurance Portability and Accountability Act, or HIPAA. Our source assured Cointelegraph that Plaid only stores the amount of data necessary for the services it provides. They also said that the company does not intentionally collect users’ health data.
The source also denied the allegation that Plaid stores usersâ€™ login credentials in â€œplain textâ€�, making it vulnerable to hackers. On the contrary, the company takes â€œsecurity very seriouslyâ€�, the source said.
The complaint mentioned a case from 2019, when PNC Bank blocked Plaid. They state that the reason was that â€œaggregators access account numbers, many store them indefinitely, often unbeknownst to customersâ€�. Our source declined to comment on this case.
Coinbase relies on Plaid
â€œFor US customers, you can verify your account in just a few minutes by entering your bank credentials. You may be familiar with this process if you’ve ever verified a bank account on Paypal or similar services. These banking credentials are never sent to Coinbase, but are shared with an integrated, trusted third-party, Plaid Technologies, Inc., to facilitate instant account verification. This service may store the provided credentials for verification purposes or use them on a per-transaction basis for fraud prevention, and to help verify a sufficient balance is available to process your transaction.â€�
Coinbase has not replied to our request for comment in time for publication.
As we have learned from numerous legal cases, a resolution may take some time. On the other hand, Plaidâ€™s unfinalized acquisition places it in a vulnerable position. That may lead this case to a settlement sooner than would be otherwise expected.
The plaintiffâ€™s legal team did not respond to Cointelgraphâ€™s inquiry.
Powered by WPeMatico