Coinbase refused to pay a $20 million ransom after hackers accessed user data through bribed support agents. The breach could cost up to $400 million and affected around 97,000 users, prompting a strong company response and stock dip.

Coinbase announced Thursday it declined to pay a $20 million ransom after hackers accessed sensitive customer data by bribing overseas support agents. The company said personal details, including names, contact information, masked Social Security and bank details, and transaction history, were compromised for less than 1% of users - up to 97,000 people.

No funds were stolen, but Coinbase expects total costs from the breach - including reimbursements and security upgrades - to range between $180 million and $400 million. The news triggered a 7% drop in its stock.

CEO Brian Armstrong said Coinbase fired the involved contractors, is working with law enforcement, and will pursue criminal charges. He also announced a $20 million reward for information leading to the attackers' arrest.

Coinbase is boosting its U.S.-based support and strengthening defenses. The breach comes just before the company’s inclusion in the S&P 500, a milestone for crypto adoption. Meanwhile, Coinbase confirmed the SEC is investigating past reporting practices related to user metrics - a matter it said had already been disclosed.

Copied