A previously undisclosed security breach has exposed sensitive user data of nearly 70,000 Coinbase customers, following what appears to be an internal compromise involving bribed support staff.
The incident, which occurred back in December but only came to light in early May, involved a small group of customer service agents based overseas who were paid off to leak user data.
The attackers gained access to partial banking and social security details, contact information, ID images, and account-related metadata.
Coinbase became aware of the breach after receiving a Bitcoin ransom demand for $20 million. The company refused to pay and notified affected customers by email on May 15.
CEO Brian Armstrong later confirmed in a public statement that Coinbase would reimburse those impacted, bolster its security defenses, and move some of its customer operations away from high-risk regions.
Cleanup costs are expected to fall between $180 million and $400 million, according to internal estimates.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.
A malicious open-source project on GitHub disguised as a Solana trading bot has compromised user wallets, according to a July 2, 2025, report by cybersecurity firm SlowMist.
The U.S. Department of Justice has sentenced Dwayne Golden, 57, of Pennsylvania to 97 months in prison for orchestrating a fraudulent crypto investment scheme that stole over $40 million from investors.