Coinbase Hit by Massive Hack: $400M at Risk, User Data Compromised

Coinbase, the leading American crypto exchange platform, has just suffered a major cyberattack involving the leak of sensitive data of about 1% of its users. This security breach occurs at a particularly delicate moment for the company, just days before its entry into the prestigious S&P 500 index. What will be the consequences for this giant boasting over 105 million users?

A Cyberattack Targets Coinbase and Threatens User Trust

On May 11, Coinbase received an anonymous email revealing a data leak and demanding a $20 million ransom in bitcoin. After investigation, the company discovered that cybercriminals had corrupted several foreign technical support agents, thereby creating a breach in their security system.

These dishonest employees extracted sensitive information concerning about 1% of the 10.8 million active users.

Among the compromised data are names, personal addresses, identity documents, partial bank details, and—more worryingly—the exact balances of the victims’ crypto accounts.

“Their goal was to compile a list of clients they could contact pretending to be Coinbase, thereby prompting people to hand over their cryptos to them,” the platform explained in an official statement.

A particularly formidable social engineering strategy amid a context where scams targeting crypto holders are multiplying.

In response, Coinbase immediately fired all involved employees and alerted U.S. authorities. CEO Brian Armstrong publicly refused to yield to the blackmail.

We will not pay your ransom… Instead, we offer a $20 million reward for any information leading to the arrest and conviction of these attackers.

Major Financial and Security Consequences

This cyberattack could cost Coinbase between $180 and $400 million, according to documents filed with the SEC. These expenses will cover repair costs and reimbursements to clients who lost funds.

The announcement also had an immediate impact on the stock price, which fell more than 4% to below $253 during the first hours of trading. This situation is all the more worrying as it occurs just as Coinbase prepares to join the S&P 500 index, a milestone for this company founded in 2012.

To reassure its users, Coinbase confirmed that two-factor authentication codes and private keys were not compromised, and that the company will reimburse all customers who lost funds due to this attack.

The company also put in place additional measures, such as relocating some support operations to the United States and strengthening internal access controls.

In sum, this attack highlights the persistent vulnerability of crypto exchange platforms against cyber threats. At a time when kidnappings and assaults targeting crypto holders are increasing, particularly in France, these data leaks represent a real danger to users who could be targeted by social engineering attacks or, worse, physical assaults.