{"id":1536232,"date":"2025-05-15T14:25:00","date_gmt":"2025-05-15T18:25:00","guid":{"rendered":"https:\/\/bugaluu.com\/news\/?p=1536232"},"modified":"2025-05-15T14:25:00","modified_gmt":"2025-05-15T18:25:00","slug":"coinbase-hacked-after-attackers-bribed-companys-own-employees-to-leak-customer-data","status":"publish","type":"post","link":"https:\/\/bugaluu.com\/news\/coinbase-hacked-after-attackers-bribed-companys-own-employees-to-leak-customer-data\/1536232\/","title":{"rendered":"Coinbase Hacked After Attackers Bribed Company’s Own Employees To Leak Customer Data"},"content":{"rendered":"

Coinbase Hacked After Attackers Bribed Company’s Own Employees To Leak Customer Data<\/span><\/p>\n

\n

Coinbase, the world\u2019s third-largest cryptocurrency exchange, was hit by a $20 million extortion attempt after cybercriminals recruited “multiple contractors or employees working in support roles outside the United States to collect information from internal Coinbase systems to which they had access”, and to leak user data, the company said according to CoinTelegraph<\/a>.<\/p>\n

According to a May 15 blog post <\/a>and an 8K filing with the SEC<\/a>, Coinbase said a group of external actors bribed and coordinated with several customer support contractors to access internal systems and steal limited user account data.<\/p>\n

\u201cThese insiders abused their access to customer support systems to steal the account data for a small subset of customers,\u201d Coinbase said. In an email to clients, the exchange said that the leaked information “did not include your password, seed phrase, private keys, or any other information that would allow someone to directly access your account or your funds and Coinbase Prime was untouched”; but the hack could have included information like:<\/p>\n

Personal identifiers (e.g., name, date of birth, masked social security numbers (last 4 digits), masked bank account numbers and some bank account identifiers, address, phone number, email address)
\n\tImages of Government identification information (e.g., driver\u2019s license number, passport number, national identity card number)
\n\tAccount information (e.g., transaction history, balance, transfers, date you opened your account)<\/p>\n

Less than 1% of Coinbase\u2019s monthly transacting users\u2019 data was affected by the attack, the company said.<\/p>\n

Cyber criminals bribed and recruited rogue overseas support agents to pull personal data on <1% of Coinbase MTUs. No passwords, private keys, or funds were exposed. Prime accounts are untouched. We will reimburse impacted customers. More herehttps:\/\/t.co\/SidVn59JCV<\/a><\/p>\n

\u2014 Coinbase \ud83d\udee1\ufe0f (@coinbase) May 15, 2025<\/a><\/p>\n

After stealing the data, the attackers attempted to extort $20 million worth of Bitcoin from Coinbase in exchange for not disclosing the breach. Coinbase refused the demand. Instead, the company offered a $20 million reward for information leading to the arrest and conviction of those responsible for the scheme.<\/p>\n

In 2024, Coinbase was the<\/a> most impersonated cryptocurrency brand by scammers.<\/p>\n

<\/a><\/p>\n

Coinbase said it will reimburse users who were tricked into sending cryptocurrency to phishing scammers, with expected remediation and reimbursement expenses ranging from $180 million to $400 million.<\/p>\n

The crypto exchange disclosed<\/a> the estimate in an 8-K filing with the US Securities and Exchange Commission on May 15, noting the expenses relate to \u201cvoluntary customer reimbursements\u201d and other remediation efforts.<\/p>\n

The attackers have been approaching the exchange\u2019s overseas customer support agents for months, aiming to \u201cbribe\u201d them in exchange for customer information, said Coinbase co-founder and CEO Brian Armstrong in a May 15 X post<\/a>.<\/p>\n

https:\/\/t.co\/evpIBMFvRW<\/a> pic.twitter.com\/f6UPdkL5R0<\/a><\/p>\n

\u2014 Brian Armstrong (@brian_armstrong) May 15, 2025<\/a><\/p>\n

The exchange said that following the attack it would strengthen its internal data management processes and relocate some of its customer support operations to avoid similar incidents.<\/p>\n

Social engineering schemes are a growing concern for Coinbase users. Blockchain security analyst ZachXBT estimated that users lost around $45 million<\/a> to phishing schemes in the week leading up to May 7.<\/p>\n

<\/a><\/p>\n

The blockchain security analyst previously claimed that social engineering scams cost Coinbase users over $300 million annually<\/a>, Cointelegraph reported on Feb. 4.<\/p>\n<\/div>\n

Tyler Durden<\/a><\/span>
\nThu, 05\/15\/2025 – 10:25<\/span><\/p>\n

\u200bhttps:\/\/www.zerohedge.com\/markets\/coinbase-hacked-after-attackers-bribed-companys-own-employees-leak-customer-data<\/a>\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

Coinbase Hacked After Attackers Bribed Company’s Own Employees To Leak Customer Data Coinbase, the world\u2019s third-largest cryptocurrency exchange, was hit by a $20 million extortion…<\/p>\n","protected":false},"author":0,"featured_media":1536233,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[1],"tags":[],"class_list":["post-1536232","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","wpcat-1-id"],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pbimBl-6rDW","jetpack_featured_media_url":"https:\/\/bugaluu.com\/news\/wp-content\/uploads\/sites\/3\/2025\/05\/phished20exchanges-MOhwPq.jpg","_links":{"self":[{"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/posts\/1536232","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/comments?post=1536232"}],"version-history":[{"count":0,"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/posts\/1536232\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/media\/1536233"}],"wp:attachment":[{"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/media?parent=1536232"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/categories?post=1536232"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/tags?post=1536232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}