Share this article
Coinbase Could Pay Customers Up to $400M for Data Breach
The exchange fired staff involved in the breach on the spot and will press criminal charges.
Updated May 15, 2025, 3:51 p.m. Published May 15, 2025, 11:28 a.m.
What to know:
- Coinbase (COIN) revealed that user data was breached by a group of rogue support agents that were "bribed" by cyber criminals.
- The revelation comes after on-chain sleuth ZachXBT claimed that Coinbase users had lost $300 million to social engineering scams.
- The exchange added that it will reimburse any impacted users.
Coinbase expects to pay $180 million to $400 million relating to remediation costs and voluntary customer reimbursements related to this incident, which saw attackers gain access to users personal information.
Coinbase received an email communication from the unknown threat actor on May 11, according to the firm. Attackers were able to access customers personal details, such as name, address, phone number, masked social security number, masked bank account numbers and other crucial details.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
They accessed those details by essentially bribing Coinbase's overseas employees/contractors and subsequently demanding customer details to be sent. The exchange fired staff involved in the breach on the spot and referred to U.S. and international law enforcement. It will also press criminal charges.
"Based on facts that continue to evolve, the Company has preliminarily estimated expenses to be within the range of approximately $180 million to $400 million relating to remediation costs and voluntary customer reimbursements relating to this Incident," the exchange said in an SEC filing.
Shares of Coinbase fell over 4% to under $253 during early U.S. trading hours.
The crypto exchange said in a blog post that it will "reimburse customers who were tricked into sending funds to the attacker." It has also offered a $20 million bug bounty for anyone that provides information leading to an arrest.
The confirmation of cyber criminal activity comes three months after on-chain sleuth ZachXBT claimed that Coinbase users had lost $300 million to social engineering scams.
Coinbase also said that the criminals secured government ID images, account balances and corporate data. Two-factor authentication codes and private keys were not breached, it added.
When asked for comment on the breach, Coinbase directed CoinDesk to the blog post and a statement from Coinbase CEO Brian Armstrong.
Armstrong said that he "received a ransom note" for $20 million in bitcoin in exchange for these attackers not releasing some information they claim to have obtained on Coinbase customers.
UPDATE (May 15, 12:48 UTC): Updates headline, adds details on the breach.
UPDATE (May 15, 14:19 UTC): Adds details on the breach and share price details.
CORRECTION (May 15, 16:49 UTC): Changes "breach" in the second paragraph for "email received by threat actor." Adds "remediation and voluntary reimbursements in the opening paragraph.
Mehr für Sie
KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.
Was Sie wissen sollten:
- KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
- This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
- Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
- Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
- Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.
Mehr für Sie
Tom Lee urges BitMine shareholders to approve share increase ahead of January 14 vote
The chairman of the former bitcoin miner-turned-ether treasury firm reiterated his view that Ethereum is the future of finance.
Was Sie wissen sollten:
- Tom Lee, chairman of Bitmine Immersion (BMNR), urged shareholders to approve an increase in the company's authorized share count from 500 million to 50 billion.
- Lee assured shareholders that the increase is not intended to dilute shares, but instead to enable capital raising, dealmaking, and future share splits.
- Shareholders have until January 14 to vote on the proposal, with the annual meeting scheduled for January 15 in Las Vegas.
Top Stories
