Extortionists bribed Coinbase employees to give them customer data

engadget.comPublished: 5/15/2025

Summary

Coinbase faced a devastating internal cyberattack where attackers bribed its support team to steal sensitive customer data, including personal info like names, addresses, and social security numbers. To prevent further exposure, the attackers demanded $20 million from Coinbase, which has since declined to pay. In response, Coinbase is offering a $20 million reward for more information to catch the perpetrators while ensuring user credentials remain secure. The company also plans to reimburse those affected by the extortion and enhance account security measures. The incident could cost Coinbase anywhere from $180 million to $400 million.