Coinbase Global Inc., long seen as the crypto industry’s most credible face in mainstream finance, has confirmed a major data breach involving insider bribery and the unauthorized access of sensitive customer information. While the estimated financial cost of the attack stands at $400 million, the implications stretch far deeper, casting shadows on data integrity, user safety, and the sector’s broader reputation.
According to Bloomberg, the breach—disclosed just days after Coinbase was added to the S&P 500 Index—saw hackers gain nearly unrestricted access to critical customer data by bribing customer service representatives. This access lasted for several months, beginning in January, and included names, addresses, government-issued ID numbers, banking data, and account details. The hackers reportedly demanded a $20 million ransom to delete the stolen data, and Coinbase refused to pay.
Coinbase confirmed the incident began with suspicious activity traced to several customer support agents, some of whom were based in India. The company emphasized that its Coinbase Prime institutional service, which safeguards over $122 billion in crypto assets tied to spot-Bitcoin ETFs, remained unaffected.
“This is a major breach—the amount of personal information shared is staggering,” said Mike Dudas, managing partner at Web3 firm 6MV and a reported target of the attack. “It will make people have to consider their personal physical security.” His concerns echo those of others in the space, especially in light of recent high-profile threats and violent incidents involving crypto figures.
Despite the alarming details, Coinbase shares showed signs of recovery on Friday, rising 3.3% to $252.58 after falling over 7% the day before on news of the hack and a separate SEC investigation into user metrics, according to Yahoo Finance.
The UK’s Information Commissioner’s Office has confirmed it is assessing the case, after receiving a report from Coinbase’s UK entity. The regulator has the authority to impose penalties of up to 4% of a company’s global annual revenue for serious data protection violations under the UK GDPR framework.
Coinbase’s Chief Security Officer, Philip Martin, disputed suggestions of persistent access by the hackers, stating that compromised agents were quickly removed once the breach was identified. Still, the incident underscores a troubling new frontier in crypto security—where human vulnerabilities now rival technical exploits in scale and consequence.
Coinbase Global Inc., a leading cryptocurrency exchange, has disclosed a significant data breach resulting from insiders being bribed by cybercriminals. The attackers accessed sensitive customer information, including names, addresses, government-issued ID numbers, and partial banking details. The breach, which began earlier this year, was facilitated by bribed overseas contractors who misused their access to internal systems .MarketWatch+1The Times+1
The hackers demanded a $20 million ransom to prevent the release of the stolen data. Coinbase refused to pay and is cooperating with law enforcement agencies in the ongoing investigation . The company estimates the financial impact of the breach could reach up to $400 million, accounting for remediation efforts and potential legal liabilities .The TimesMarketWatch
Despite the breach, Coinbase's inclusion in the S&P 500 index remains on track, marking a significant milestone as the first crypto-native company to join the benchmark .Coinbase+3CoinGeek+3Yahoo Finance+3
In a separate development, Coinbase confirmed it is cooperating with a U.S. Securities and Exchange Commission investigation into its past reporting of user metrics .PYMNTS.com+1Bloomberg+1
The breach underscores the growing challenges faced by cryptocurrency platforms in securing user data and maintaining trust in the rapidly evolving digital asset landscape.