Coinbase suffered a data breach involving bribed TaskUs support staff, exposing data of nearly 70,000 users including names, contact info, masked Social Security numbers and ID images, while attackers demanded a $20 million ransom that Coinbase refused

Quotes that support claims

the company faced a high-profile data breach involving bribed support staff. Rather than pay the attackers’ ransom, Coinbase created a $20 million reward fund for information that could help identify and prosecute those responsible.

The stolen data included transaction histories, account balances, and internal documentation accessible to support agents; however, the attackers never obtained passwords, private keys, or wallet access.

Coinbase’s recent data breach involving bribed overseas support staff who leaked information on nearly 70,000 users, resulting in a $20 million ransom demand that the exchange refused to pay.

The incident, first detected in January but publicly disclosed in May, compromised names, contact details, masked Social Security numbers, and government-issued ID images for nearly 70,000 users.