Coinbase revealed that cyber criminals bribed and recruited rogue support agents to steal customer data and deceive victims into transferring funds to attackers. The breach exposed personal information including names, addresses, phone numbers, government ID images, account details, and partial social security numbers of a small group of users. After receiving a $20 million ransom demand from the threat actor, Coinbase refused to pay and has launched an investigation with law enforcement. The involved employees were immediately terminated, and criminal charges will be pursued. Importantly, attackers did not gain access to login credentials, 2FA codes, private keys, or wallets. Coinbase may spend up to $400 million to reimburse affected users and offers a $20 million reward for information leading to an arrest. The company cautions users against scams impersonating Coinbase employees asking for sensitive information or funds transfers.
Back
