Coinbase Rejects $20M Ransom, Pledges Same Bounty After Insider Leak Hits 1% of Users
By: crypto news|2025/05/15 23:17:05
0
Share
$20 million ransom demand flipped into a matching bounty when Coinbase disclosed this week that bribed overseas support staff leaked partial data on less than 1% of its users, reigniting fears of insider threats across crypto exchanges.Cyber criminals bribed and recruited rogue overseas support agents to pull personal data on https://t.co/SidVn59JCV— Coinbase (@coinbase) May 15, 2025The crypto exchange says a group of rogue agents were bribed by cybercriminals to copy sensitive data, which was then used in a social engineering campaign to impersonate Coinbase and defraud users.Although no customer funds, passwords, or private keys were accessed, the attackers obtained partial personal information, including names, contact details, masked Social Security and bank account numbers, and in some cases, images of government-issued IDs. Coinbase emphasized that Coinbase Prime users were not impacted and that no direct access to hot or cold wallets was ever at risk.“We’re committed to full transparency,” Coinbase said in a public statement, “and instead of giving in to the $20 million ransom demand, we’re establishing a $20 million reward fund to bring the criminals to justice.”The Anatomy of the AttackAccording to Coinbase, the breach occurred when criminals targeted overseas support agents and offered them financial incentives to participate in the scheme. A small number of insiders accepted the bribes and abused their privileged access to copy data stored in customer support tools.The attackers then attempted to extort the company, threatening to release the stolen information unless Coinbase paid a $20 million ransom. The exchange declined the demand, opting instead to notify affected users and bolster its internal and external security infrastructure.The stolen data included transaction histories, account balances, and some internal documentation accessible to support agents. However, the attackers did not obtain passwords, two-factor authentication codes, private keys, or access to any wallets, thus preventing direct theft of funds.Coinbase’s Response and Customer SupportIn response to the breach, Coinbase has pledged to reimburse retail customers who were tricked into sending funds to scammers through social engineering tactics. These reimbursements will be made after a thorough review process. Affected accounts are now subject to increased withdrawal security protocols, including additional ID checks and scam-awareness prompts.Coinbase said it is also taking steps to reinforce its global support operations. For example, a new customer support hub is being established in the United States, and enhanced insider-threat detection systems are being rolled out across all service locations.The company has intensified internal simulations to stress-test its security infrastructure and isolate potential vulnerabilities.All impacted users have received direct communication, and Coinbase is working closely with law enforcement agencies both in the U.S. and internationally. The rogue employees involved were immediately terminated and referred for criminal prosecution.A Call for AccountabilityRather than succumbing to extortion, Coinbase said it is offering a $20 million reward for information that leads to the arrest and conviction of those responsible for the breach. Anyone with credible information is encouraged to contact the company at security@coinbase.com. In parallel, Coinbase and its partners have tagged crypto wallet addresses associated with the attackers to aid in asset recovery.Coinbase is also reminding users to stay vigilant against scams and impersonators. Customers are urged to never share passwords or 2FA codes, and to lock their accounts immediately if something seems suspicious.“Trust is foundational to crypto adoption,” Coinbase said in its closing statement. “We’re sorry for the concern this incident caused and remain committed to transparency and protecting our users at every step.”Huge Blow for the CompanyCommenting on the cyber attack on Coinbase, Nick Jones, founder and CEO at Zumo, said: “Unfortunately, as our nascent industry grows rapidly, it draws the eye of bad actors, who are becoming increasingly sophisticated in the scope of their attacks and harnessing new AI tools and techniques to bypass fraud prevention measures.”“This is understandably a huge blow for a company that has had a pivotal few weeks, announcing the acquisition of Deribit in the digital market’s largest deal to date, and then joining the S&P 500.”“This attack underlines the critical importance of robust cybersecurity measures. The European Union (EU) introduced its Digital Operational Resilience Act (DORA) earlier this year with an emphasis on financial institutions ensuring the resilience of their supply chain, promoting better data hygiene, and sharing usable insights on attacks they have experienced to strengthen the industry’s perimeter. This seems particularly pertinent as it emerges that the hack occurred when attackers bribed overseas support staff,” Jones added.The post Coinbase Rejects $20M Ransom, Pledges Same Bounty After Insider Leak Hits 1% of Users appeared first on Cryptonews.
You may also like

WLFI at it Again? Banking License Controversy Amid $500M Investment
The UAE's investment in World Liberty Financial has heightened concerns over whether it received special treatment and whether national security issues are involved

The Aave civil war escalates, Morpho quietly doubles: Is the lending throne about to change hands?
Wall Street asset management giant Apollo Global Management invested $160 million in Morpho.

Dune Stablecoin Research: The Flow and Demand of a $300 Billion Market
In the dataset, transfers are no longer simply labeled as pure "transaction volume," but are classified as different on-chain activities. This is the difference between "just knowing that $100 trillion has been transferred" and "understanding why it was transferred."

Stripe Annual Letter: New cognitive density is extremely high, especially the 5-level model of "AI + Payments"
Every trend here is affecting everyone's future survival.

Sam Altman's Twenty-Four Hours: The Pentagon said "no" twice, but only one was serious
In Silicon Valley, Altman's sub-12-hour move has a name. It's not called backstabbing, it's called timing.

The US-Iran Conflict Spreads to the Crypto Space: What to Expect in the Market on Monday
The most important industry in the crypto world, only 300 kilometers away from the missile's impact point

Lily Liu, the chair of the Solana Foundation, shouted "Don't waste time on crypto," is the crypto industry really dead?
The interest of the younger generation is shifting from cryptocurrency to the field of artificial intelligence, which coincides with the current phenomenon in the cryptocurrency industry.

The little deer live by the water and grass
Mining companies have never been the most devout believers in Bitcoin. Under the pressures of halving compressing profits, financial reports showing revenue growth without profit increase, and coin prices falling below mining costs, the industry is collectively de-risking.

The world belongs to Chinese people who speak English
The world is vast, and only playing half of it is truly a loss.

Why Stop at 126K? Michael Saylor Breaks Down BTC Stagnation and Retail Absence Truth
Bitcoin is digital capital, and I will spend a thousand hours explaining it to you. Eventually, you will understand, but you will still have to endure a 45% crash.

Virtuals Protocol's inaugural Titan project: ROBO aims to give a wallet to a robot
This is a key step in Virtuals expanding the Agent Economy into the Embodied AI and Robotics field.

Stablecoin Latest Report: Actual Distribution and Circulation Much More Notable Than Supply
The Truth about Stablecoin Circulation Speed, Concentration, and Structure After Doubling the Supply

Paradigm's New Arithmetic: When Crypto Can't Hold 12.7 Billion, AI Becomes the Answer
It took Paradigm three years to emerge from the ruins of FTX.

Wintermute Founder: In the Lost Cryptocurrency Market, What Can We Still Do?
This is more like a manifesto, discussing "the very reason we are here."

$1.3 Billion Debt: BitDeer Faces Tough Battle
Wu Jihan is waiting for AI's money to catch up with the speed of debt.

Anthropic's IPO Gamble: At the Most Unlikely Moment, It Chose to Say No
In the AI Era, what is the most valuable thing?

Paradigm's Math Problem: $12.7 Billion, Too Big for a Single Crypto Fund
Emerging from the ruins of FTX, Paradigm took three years

Ethereum Unveils Scaling Roadmap, What's Different This Time?
Short-term improvements to execution efficiency through the Gas mechanism optimization and block validation parallelization, and long-term scalability through ZK-EVM and blobs data architecture.
WLFI at it Again? Banking License Controversy Amid $500M Investment
The UAE's investment in World Liberty Financial has heightened concerns over whether it received special treatment and whether national security issues are involved
The Aave civil war escalates, Morpho quietly doubles: Is the lending throne about to change hands?
Wall Street asset management giant Apollo Global Management invested $160 million in Morpho.
Dune Stablecoin Research: The Flow and Demand of a $300 Billion Market
In the dataset, transfers are no longer simply labeled as pure "transaction volume," but are classified as different on-chain activities. This is the difference between "just knowing that $100 trillion has been transferred" and "understanding why it was transferred."
Stripe Annual Letter: New cognitive density is extremely high, especially the 5-level model of "AI + Payments"
Every trend here is affecting everyone's future survival.
Sam Altman's Twenty-Four Hours: The Pentagon said "no" twice, but only one was serious
In Silicon Valley, Altman's sub-12-hour move has a name. It's not called backstabbing, it's called timing.
The US-Iran Conflict Spreads to the Crypto Space: What to Expect in the Market on Monday
The most important industry in the crypto world, only 300 kilometers away from the missile's impact point