Coinbase Reports Data Breach Involving Bribed Support Agents and $20M Ransom Demand

Coinbase, the leading U.S.-based cryptocurrency exchange, disclosed a serious security breach where cybercriminals obtained sensitive customer data by bribing overseas customer support agents. The stolen information included names, birth dates, and partial Social Security numbers, enabling the attackers to conduct social engineering scams by impersonating Coinbase support staff. The criminals demanded a $20 million ransom in bitcoin to avoid the public release of the data. However, Coinbase has refused to pay and instead offered a $20 million bounty for any information leading to the attackers’ identification and arrest. CEO Brian Armstrong emphasized the company’s intent to prosecute the perpetrators and warned of serious legal consequences. Coinbase noted that some of the compromised support agents had accessed data without legitimate business needs in prior months and were subsequently terminated. The incident could cost the company between $180 million and $400 million in remediation and voluntary customer reimbursements. Despite the breach, Coinbase’s stock remains up for the month, benefiting from a general rise in cryptocurrency prices. The situation highlights ongoing vulnerabilities in tech company customer support systems and the persistent threat of social engineering in cybersecurity.