Overview

• An amended class-action complaint filed Tuesday in the Southern District of New York identifies TaskUs employee Ashita Mishra as a central actor in the Coinbase data theft.
• Plaintiffs allege Mishra began exfiltrating data in September 2024, was paid about $200 per image, and had information for more than 10,000 customers on her phone when the scheme was uncovered.
• The complaint describes a hub-and-spoke conspiracy that recruited additional TaskUs staff in Indore, leading the company to dismiss hundreds of employees in January.
• Plaintiffs say TaskUs fired HR investigators in February and omitted the breach from a February 10-K, characterizing this as concealment while proceeding toward a $1.6 billion Blackstone deal.
• Coinbase says it reimbursed affected users, cut ties with TaskUs, tightened controls, and offered a $20 million reward, while maintaining the breach occurred in late December despite plaintiffs’ September start-date claim; more than 69,000 customers were impacted with costs estimated up to $400 million.