Cryptocurrency exchange Coinbase has confirmed that at least 69,461 customers had personal and financial information stolen in a months-long data breach, which the company disclosed last week.
The breach, which involved insider bribery, has raised serious concerns about the security of sensitive user data in the digital asset industry.
In a filing with the Maine Attorney General’s Office, as required under the state’s data breach notification law, Coinbase said the breach occurred between December 26, 2024, and continued until early May 2025. The company reportedly became aware of the intrusion after receiving a “credible” ransom note from a hacker demanding $20 million in exchange for deleting the stolen data.
Coinbase said it refused to pay the ransom.
In a blog post detailing the incident, Coinbase revealed that the attacker bribed customer support employees over several months to gain access to internal systems and customer data. The stolen information includes customer names, email and postal addresses, phone numbers, government-issued IDs, account balances, and transaction histories—raising concerns that high-net-worth individuals could now be targeted.
The company did not disclose how many support workers may have been compromised or whether disciplinary or legal actions have been taken. It also did not confirm whether any funds were stolen, focusing instead on the data exposure.
Coinbase said it is working with law enforcement and cybersecurity experts to investigate the breach and has notified affected users. The exchange emphasized that customer funds remain safe and accessible, though it acknowledged the seriousness of the data theft.
The incident underscores growing cybersecurity risks in the cryptocurrency sector, especially where insider threats and social engineering tactics are involved. Regulatory scrutiny is expected to intensify as investigations continue.
Read next
20:30
Data center
A massive, unanticipated disconnection of data centers in a 30-square-mile area outside Washington, D.C. has exposed a fresh vulnerability in America’s electrical grid, raising concerns that the rapid expansion of Big Tech’s energy-hungry facilities could trigger cascading outages.
21:30
Meta
According to a report by The Information, Meta Platforms is in discussions to build a new data center campus dedicated to its artificial intelligence projects, with potential costs exceeding $200 billion.
19:00
Vape sales
London, February 24, 2025 – Private retail sales data reviewed by Reuters indicates that sales of unauthorized, flavoured disposable vapes in the United States totaled around $2.4 billion in 2024.
What is your opinion on this topic?
Leave the first comment