Coinbase is now facing mounting scrutiny after it allegedly sat on a serious data breach for over four months, exposing the personal information of nearly 70,000 users before taking action.
The breach, which reportedly began with insiders at an overseas customer support center leaking sensitive data, was discovered in January 2025. However, users and regulators were not informed until May. The compromised data included partial Social Security numbers, home addresses, and account activity tied to support tickets.
The vendor at the center of the leak, TaskUs, is said to have had staff in India who accepted bribes in exchange for screenshots of Coinbase customer information. The exchange has since cut ties with the firm and is reportedly implementing stricter oversight of all third-party partners.
Coinbase now estimates the incident could cost up to $400 million in legal and remediation expenses. Meanwhile, a class-action lawsuit accuses the company of withholding critical information that might have affected its stock performance. A separate case has been filed against TaskUs for negligence.
By March, the stolen data had surfaced in Telegram groups known for crypto fraud, with attackers eventually attempting to extort $20 million from Coinbase in exchange for deleting the files. The company refused and instead offered the same amount as a bounty for leads on the culprits.
Regulatory agencies are now investigating whether Coinbase’s failure to disclose the breach sooner violated SEC rules for public companies.
A late-night distress call has exposed a sizeable cryptocurrency heist, according to 23pds, chief security officer at blockchain-forensics firm SlowMist.
Blockchain data suggests that quantitative investment firm Manifold has quietly accumulated a sizable amount of Curve Finance’s native token, CRV.
Basketball icon Shaquille O’Neal has agreed to pay $1.8 million to settle a lawsuit tied to his promotion of the now-bankrupt crypto exchange FTX, according to new court filings.
The fight over whether writing privacy-focused code is a crime is heating up on both sides of the Atlantic, and the crypto community is opening its wallet to defend two key Tornado Cash engineers.