Personal information leaked in Coinbase cyberattack, cost could be $400 million

Skip to main content
Tech Radar Pro
Tech Radar Gaming
Tech Radar Pro
TechRadar the business technology experts
Search TechRadar
View Profile
België (Nederlands)
Deutschland
North America
US (English)
Australasia
New Zealand
Expert Insights
Website builders
Web hosting
World Password Day
Best website builder
Best web hosting
Best office chairs
Expert Insights
Recommended reading
Coinbase targeted after recent Github attacks
Hackers steal over $1bn in one of the biggest crypto thefts ever
Over $1.5 billion of crypto was lost to scams or theft in just three months of 2025
PoisonSeed campaign hijacks business CRM and email accounts to send out huge amounts of spam
Top US mineral firm hit by cyberattack that saw thieves steal $500,000
Australia's largest pension funds hit by hackers, thousands of dollars stolen
FBI says North Korean Lazarus hackers were behind $1.5 billion Bybit crypto hack
Personal information leaked in Coinbase cyberattack, cost could be $400 million
Sead Fadilpašić
16 May 2025
Hackers bribed Coinbase employees to obtain the data
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
Coinbase confirmed suffering a cyberattack recently
The attack started when crooks bribed the company's employees overseas
Passwords, and user funds, were not affected
Coinbase, one of the biggest centralized cryptocurrency exchanges in the world, suffered a cyberattack which might cost it between $180 million and $400 million. This is according to Reuters, citing a regulatory filing submitted by the company earlier this week.
The exchange said that on May 11, it received an email from an unknown threat actor who claimed they obtained internal documents, and sensitive data about certain customer accounts. Coinbase later confirmed these claims, saying that only a “small subset” of customers were affected.
The data stolen doesn’t include login credentials or passwords, but Coinbase did say it would reimburse anyone who gave their money to the attackers. To obtain the files, the criminals allegedly paid “multiple contractors and employees” who were working in support roles outside the US.
You may like
Coinbase targeted after recent Github attacks
Hackers steal over $1bn in one of the biggest crypto thefts ever
Over $1.5 billion of crypto was lost to scams or theft in just three months of 2025
TechRadar Pro readers can get 60% off Premium Plans at RoboForm now!
New users can take advantage of RoboForm’s exclusive deal and get 60% off the Premium Plan. With this deal, you can get unlimited password storage, one-click login & autofill, password sharing, two-factor authentication for added protection, cloud backup, and emergency access for trusted contacts. To claim this deal, visit this link and sign up for the Premium Plan to lock in this huge discount.
Preferred partner (What does this mean?)
Demanding ransom
The individuals involved were identified and subsequently fired. There is no information on possible legal action against them.
The attackers demanded a ransom of $20 million in exchange for the data, which Coinbase refused to pay. Instead, it is now offering that exact amount of money - $20 million - as a bounty to anyone who comes forward with actionable information regarding the hackers’ identities or whereabouts.
Crypto is in a difficult position right now, trying to establish itself as a legitimate industry, while being surrounded by theft, scams, crime, and regulatory pressure. Just a few months ago, ByBit - another major cryptocurrency exchange - was hacked, with North Korean cybercriminals walking away with $1.5 billion in different tokens.
Earlier this May, Alex Mashinsky, the former CEO of the bankrupt crypto bank, Celsius Network, was sentenced to 12 years in prison after pleading guilty to securities fraud and commodities fraud, and recently - in broad daylight - three individuals tried to kidnap the daughter of a crypto exchange CEO.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
At the same time, Reuters is reporting that the SEC took the opportunity to investigate if Coinbase misstated user figures and if it has inadequate KYC practices. Coinbase denied the probing, though.
Via Reuters
You might also like
Coinbase 2FA error fixed after many believed their account was hacked
Take a look at our guide to the best authenticator app
We've rounded up the best password managers
Sead Fadilpašić
Social Links Navigation
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.
Coinbase targeted after recent Github attacks
Hackers steal over $1bn in one of the biggest crypto thefts ever
Over $1.5 billion of crypto was lost to scams or theft in just three months of 2025
PoisonSeed campaign hijacks business CRM and email accounts to send out huge amounts of spam
Top US mineral firm hit by cyberattack that saw thieves steal $500,000
Australia's largest pension funds hit by hackers, thousands of dollars stolen
Latest in Security
Google removes Chrome admin privileges to reduce threat posed by dodgy extensions
Australian Human Rights Commission leaks docs and personal information in browser-indexing mishap
Millions seized and 17 arrested in Europol criminal banking bust
Scattered Spider moves beyond the UK, places crosshairs on US companies
Dior fashion brand hit by cyberattack and customer data leaked - here's what we know
SAP NetWeaver woes worsen as ransomware gangs join the attack
Latest in News
Nikon's next camera could be a Sony-rivalling video specialist with RED tech
Two big Netflix video game movie adaptations just got their most exciting updates in years
Retailers demand European Commission investigate Visa and Mastercard fees
Apple code hints at AirPods Pro 3 launch – here’s what to expect
Android and Chrome just got 4 super-useful accessibility upgrades – including a powerful Gemini trick for quizzing photos
Meta says no evidence it monopolized social media market, asks Judge to throw out antitrust case
LATEST ARTICLES
Personal information leaked in Coinbase cyberattack, cost could be $400 million
Nikon's next camera could be a Sony-rivalling video specialist with RED tech
Finally, a bird feeder camera with 4K video, plus it has some handy features for any garden
Breville's new premium drip coffee maker promises quick cold-brew, more flavor, and less mess
Two big Netflix video game movie adaptations just got their most exciting updates in years
TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
Contact Future's experts
Terms and conditions
Privacy policy
Cookies policy
Advertise with us
Web notifications
Accessibility Statement
Future US, Inc. Full 7th Floor, 130 West 42nd Street,
Please login or signup to comment
Please wait...