# Coinbase says customers' personal information stolen in data breach

Source: https://techcrunch.com/2025/05/15/coinbase-says-customers-personal-information-stolen-in-data-breach
Kiwi News: https://news.kiwistand.com/stories/Coinbase-says-customers-personal-information-stolen-in-data-breach?index=0x682779fa1fa35f2b33b2f3bc911f77a156b37caa56dd4cc96478cd8e399129e9cb3603f1
Submitted by misha on 2025-05-16 UTC, 1 upvote, 1 comment

## Summary

Coinbase has confirmed that its systems were breached and that customer data, including government-issued identity documents, was stolen. In a filing with U.S. regulators, the company said a hacker who claimed to have obtained customer account information demanded money in exchange for not publishing it, and Coinbase said it will not pay. CEO Brian Armstrong said in a social post that the hacker demanded $20 million. Coinbase said the hacker paid multiple contractors or employees in support roles outside the United States to collect data, and that the affected customers are fewer than 1% of its 9.7 million monthly customers. The company expects costs of around $180 million to $400 million for remediation and customer reimbursements.

## Article

Crypto giant Coinbase has confirmed its systems have been breached and customer data, including government-issued identity documents, were stolen.

In a legally required filing with U.S. regulators, Coinbase said a hacker this week told the company that they had obtained information about customer accounts and demanded money from the company in exchange for not publishing the stolen data.

Coinbase said the hacker “obtained this information by paying multiple contractors or employees working in support roles outside the United States to collect information from internal Coinbase systems to which they had access in order to perform their job responsibilities.” The support staff are no longer employed, the company said.

The filing said Coinbase’s systems detected the malicious activity “in the previous months,” and that it has “warned customers whose information was potentially accessed in order to prevent misuse of any compromised information.”

Coinbase said it will not pay the hacker’s ransom. According to a social post by CEO Brian Armstrong, the hackers demanded $20 million from the company.

The company said the hacker stole customer names, postal and email addresses, phone numbers, and the last four digits of users’ Social Security numbers. The hacker also took masked bank account numbers and some banking identifiers, as well as customers’ government-issued identity documents, such as driver’s licenses and passports. The stolen data also includes account balance data and transaction histories.

The company said some corporate data, such as internal documentation, was also stolen during the breach.

In a blog post, Coinbase said it was opening a new U.S.-based support hub and will strengthen its security defenses.

When reached for comment, Coinbase spokesperson Natasha LaBranche told TechCrunch that the number of affected customers is less than 1% of its 9.7 million monthly customers, per the company’s latest annual report ending March 2025.

Coinbase said it expects to incur costs of around $180 million to $400 million relating to incident remediation and customer reimbursements.

Do you work at Coinbase and know more about the breach? Contact this reporter via Signal with the username: zackwhittaker.1337 or by email: [email protected]

Updated with more from Coinbase.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Zack Whittaker is the security editor at TechCrunch. He also authors the weekly cybersecurity newsletter, this week in security.

He can be reached via encrypted message at zackwhittaker.1337 on Signal. You can also contact him by email, or to verify outreach, at [email protected].

View Bio

## Comments

**misha**: happy to have never used Coinbase. the perils of centralization. but must admit hackers and scammers are really out in force lately. just terrible of course.