Coinbase faces $400M bill after insider phishing attack

By: the crypto news wire|2025/05/15 20:45:04
0
Share
copy
Coinbase, the world’s third-largest cryptocurrency exchange, was hit by a $20 million extortion attempt after cybercriminals recruited overseas support agents to leak user data, the company said. According to a May 15 blog post, Coinbase said a group of external actors bribed and coordinated with several customer support contractors to access internal systems and steal limited user account data. “These insiders abused their access to customer support systems to steal the account data for a small subset of customers,” Coinbase said, adding that no passwords, private keys, funds or Coinbase Prime accounts were affected. Less than 1% of Coinbase’s monthly transacting users’ data was affected by the attack, the company said. Source: Coinbase After stealing the data, the attackers attempted to extort $20 million from Coinbase in exchange for not disclosing the breach. Coinbase refused the demand. Related: Ukraine strategic Bitcoin reserve bill reportedly in final stages Instead, the company offered a $20 million reward for information leading to the arrest and conviction of those responsible for the scheme. Scammers often masquerade as recognizable brands to inspire a false sense of trust in their victims. US brands impersonated by scammers the most. Source: Mailsuite In 2024, Coinbase was the most impersonated cryptocurrency brand by scammers. Related: Top South Korean presidential hopefuls support legalizing Bitcoin ETFs Coinbase will reimburse phishing attack victims Coinbase said it will reimburse users who were tricked into sending cryptocurrency to phishing scammers, with expected remediation and reimbursement expenses ranging from $180 million to $400 million. The crypto exchange disclosed the estimate in an 8-K filing with the US Securities and Exchange Commission on May 15, noting the expenses relate to “voluntary customer reimbursements” and other remediation efforts. The attackers have been approaching the exchange’s overseas customer support agents for months, aiming to “bribe” them in exchange for customer information, said Coinbase co-founder and CEO Brian Armstrong in a May 15 X post . Source: Brian Armstrong Following the attack, the exchange will strengthen its internal data management processes and relocate some of its customer support operations to avoid similar incidents. Social engineering schemes are a growing concern for Coinbase users. Blockchain security analyst ZachXBT estimated that users lost around $45 million to phishing schemes in the week leading up to May 7. Source: ZachXBT The blockchain security analyst previously claimed that social engineering scams cost Coinbase users over $300 million annually , Cointelegraph reported on Feb. 4. Magazine: Crypto wanted to overthrow banks, now it’s becoming them in stablecoin fight

You may also like

Deconstructing the Public Chain Pharos Capital Game: Is a $950 million valuation supported by assets like photovoltaics just a shell transaction under layers of betting?

When a physical industry company injects physical assets into a Layer 1 project, it can easily create a valuation of 950 million dollars by calculating several times the value of the physical assets. Is this kind of capital game too outrageous? Does the crypto market really need such RWAs?

a16z: AI is making everyone 10x more productive, but the true winner has yet to emerge

Institutional AI and Retail AI "Better Integration" is an Inevitable Trend.

Why did the star Web3 project Across Protocol choose to abandon DAO?

The proposal for Across to privatize itself is a rare move, but it comes at a time when the industry is beginning to recognize that DAOs are a difficult organizational structure to operate.

In fact, ETH scaling is a major benefit for L2

ETH has finally admitted defeat—its Rollup-centric roadmap is unworkable, while the monolithic scaling solutions adopted by blockchains like Solana have proven to be correct.

Memories: 10 Key Contributions of the TON Core Team That Few People Knew in the Early Days

Every line of code, every tool we build, every sleepless night spent maintaining the network—these efforts have laid the foundation for TON's development today.

2025 South Korea CEX Listing Post-Mortem: Investing in New Coins = 70% Loss?

The 2025 South Korean exchange's new token listing performance is structurally similar to Binance's, with no significant differences.

Popular coins

Latest Crypto News

Read more