Overview
- Hyderabad Police detained a former Coinbase customer service agent linked to the May 2025 insider-enabled data breach, according to CEO Brian Armstrong.
- Coinbase disclosed that attackers bribed overseas support contractors to access sensitive customer information and issued a $20 million ransom demand, which the company refused.
- The company set up a $20 million bounty for leads and pledged reimbursements to affected users as part of its remediation efforts.
- Regulatory filings say 69,461 users were affected and note that exposed data included personal details and ID images, while passwords, private keys, and direct access to funds were not compromised.
- Coinbase says the breach-related costs could reach up to $400 million, with recent disclosures citing about $307 million, and the company also points to separate Brooklyn charges over an impersonation scheme targeting its customers.