Coinbase

Disclosed May 14, 202569,461 affectedConfirmed

Bribed support contractors leak Coinbase customer data, $20M extortion

Coinbase said an attacker bribed overseas support contractors to pull customer data from internal systems, then demanded $20 million, which Coinbase refused. Stolen data included names, contact details, last four SSN digits, masked bank data, ID images, balances and transaction history for 69,461 customers.

What is known

People affected	69,461 (as reported by the organization)
Disclosed	May 14, 2025
Discovered	May 11, 2025
Happened	Dec 26, 2024
Attack	Insider
Data exposed	NamesAddressesEmailsPhone numbersSocial Security numbersFinancialGovernment IDsInternal documents
Sector	Crypto · US
Status	Confirmed
Lawsuit or fine	In re Coinbase Customer Data Security Breach Litigation (filed 2025-08-13) On Lawsuits

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Coinbase

Official noticeatg.wa.gov

Washington Attorney General breach notice: Coinbase

Newstechcrunch.com

Coinbase says customers' personal information stolen in data breach

Newstechcrunch.com

Coinbase says its data breach affects at least 69,000 customers

SEC filingsec.gov

Coinbase Global Form 8-K Item 1.05

fru.devlawsuits.fru.dev

Lawsuits: In re Coinbase Customer Data Security Breach Litigation

Official noticein.gov

Indiana Attorney General 2025 data breach report: Coinbase

Notices filed

TotalMay 14, 2025

Research69,461 people

Residents of CAMay 20, 2025

California AGCount not stated

Residents of WAMay 20, 2025

Washington AG3,337 people

Residents of INMay 30, 2025

Indiana AG288 people

Other breaches at Coinbase

Coinbase confirms contractor improperly accessed data of about 30 customersInsider exposed names, emails, phone numbers, dates of birth, government IDs and financial details. Reported to the Indiana AG.Insider32 affectedCryptoUSDec 11, 2025 Breach, details not statedBreach notice filed with the California AG, details not stated.6,159 affectedFinanceUSSep 27, 2021

History of this record

source2026-09-25

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource

lawsuits_ref2026-09-25

empty to in-re-coinbase-breach-mdlby weeklySource

lawsuit2026-09-25

empty to In re Coinbase Customer Data Security Breach Litigation (filed 2025-08-13)by weeklySource

sector2026-09-25

finance to cryptoby seedSource

attack2026-09-25

hacking to insiderby seedSource

data_types2026-09-25

[] to ["names","addresses","emails","phone","ssn","financial","government-id","internal-docs"]by seedSource

records_basis2026-09-25

empty to organizationby seedSource

records2026-09-25

empty to 69461by seedSource

disclosed2026-09-25

2025-05-20 to 2025-05-14by seedSource

summary2026-09-25

empty to Coinbase said an attacker bribed overseas support contractors to pull customer data from internal systems, then demanded $20 million, which Coinbase refused. Stolen data included names, contact details, last four SSN digits, masked bank datby seedSource

title2026-09-25

empty to Bribed support contractors leak Coinbase customer data, $20M extortionby seedSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2025-05-11by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Coinbase