Coinbase disclosed a security breach where cyber attackers targeted its customer support staff to steal sensitive customer data. The hackers attempted extortion but failed to access private keys or funds.
Affected: Coinbase customers, internal support systems
Affected: Coinbase customers, internal support systems
Keypoints
- The breach involved attackers convincing support agents to copy customer data using social engineering techniques.
- Less than 1% of Coinbase’s 9.7 million monthly users were affected by the data theft.
- The compromised data included personal details, government IDs, and transaction history, but not passwords or private keys.
- Coinbase responded by reimbursing affected customers, enhancing ID verification for large transactions, and increasing security measures.
- The company established a $20 million reward fund for information leading to the attackers’ arrest and conviction.
Read More: https://thehackernews.com/2025/05/coinbase-agents-bribed-data-of-1-users.html