Overview

• The amended class action filed in New York names TaskUs employee Ashita Mishra as a central figure who allegedly photographed Coinbase customer records starting in September 2024 for about $200 per image.
• Plaintiffs say Mishra shot up to 200 records a day and stored data on more than 10,000 customers, describing a hub-and-spoke conspiracy that recruited additional TaskUs staff in India.
• TaskUs is accused of firing investigators and disbanding HR teams, dismissing roughly 226 to around 300 employees in January, and omitting the breach from its February 10-K before a $1.6 billion Blackstone deal.
• Coinbase says less than 1% of monthly transacting users—about 69,000 customers—were affected, that it reimbursed victims, cut ties with TaskUs, tightened vendor and insider controls, and posted a $20 million reward for tips.
• Losses tied to the incident could reach up to $400 million, and the timeline remains disputed, with plaintiffs alleging thefts began in September 2024 while Coinbase has cited late December.