Extortionists bribed Coinbase workers to present them buyer knowledge

Coinbase has been betrayed from inside. The cryptocurrency trade said that cyber criminals bribed a few of its assist brokers to share private details about Coinbase clients. Attackers acquired knowledge resembling names, addresses, emails, telephone numbers, pictures of presidency IDs, masked checking account numbers and masked sections of social safety numbers. The perpetrators tricked some Coinbase customers into sending them cash and in addition demanded $20 million from the corporate to not publicly disclose the ill-gotten info.

Coinbase has not paid the ransom and is cooperating with regulation enforcement to press expenses. Within the weblog publish, the corporate stated it might supply a $20 million reward for info that might result in arresting and convicting the remaining attackers.

A Maine Lawyer Basic filing (via TechCrunch) says the breach affected 69,461 clients. The hack started on December 26, 2024, and ran till Might 11.

Coinbase stated that customers’ login credentials, two-factor authentication codes and personal keys are nonetheless safe. It is going to reimburse clients who despatched funds to the extortionists and can place extra safeguards on weak accounts. In accordance with an SEC filing, the incident is projected to price Coinbase $180 million to $400 million.

Replace, Might 21, 2025, 11:23 PM ET: This story has been up to date with new data from the Maine Lawyer Basic submitting.