Coinbase Discloses Massive Breach: Nearly 70,000 Users Affected

Coinbase has just announced a major security breach that exposed the personal data of nearly 70,000 customers. This crypto attack occurred on December 26, 2024. However, it was not discovered until May 2025. This has caused a shockwave within the crypto sphere! More importantly, it raises many questions about the security of crypto exchanges.

Coinbase victim of an internal breach and an extortion attempt in the crypto sphere

The scandal broke after a group of cybercriminals recruited customer service agents from Coinbase to illegally access the personal data of 69,461 users. This data includes:

• names;
• addresses;
• phone numbers;
• identity documents;
• transaction histories;
• partially masked bank information.

According to the documents filed with the Maine Attorney General, the crypto breach (also described as an “internal wrongful act”) went unnoticed for nearly six months. The hackers then attempted to extort a ransom of 20 million dollars, which Coinbase refused.

The financial consequences are heavy. The crypto exchange indeed anticipates repair and reimbursement costs that could reach 400 million dollars. Coinbase even commits to reimbursing customers who suffered losses due to social engineering attacks related to this breach.

Good to know:

This case of massive hacking caused an immediate 7% drop in Coinbase’s stock price. This reflects crypto investors’ distrust in the security of cryptocurrency exchange platforms.

A major alert for the security and confidence of crypto investors

Within the crypto community, this breach raises a crucial debate on:

• KYC data management;
• protection of sensitive information.

Cryptography experts indeed warn about physical and financial risks linked to personal data leaks. The fact is that such data can turn holders into targets of extortion and theft.

In this regard, Coinbase strongly recommends its users to activate two-factor authentication (2FA) and the withdrawal whitelist. The goal: to strengthen the security of crypto wallets.

In any case, this new scandal highlights the urgent need to improve cybersecurity in the crypto sector. Especially as institutional and mainstream adoption accelerates!