Coinbase (customer data theft and extortion) other on 2025-05-11
Other, 11 May 2025. Last verified 4 Nov 2026.
major
Reported loss
Not stated
no amount published
Recovered
-
nothing reported
Status
Unknown
updated 26 Oct 2026
Date
other
Summary
Coinbase disclosed in an SEC filing that a threat actor who had paid overseas support contractors or employees to pull customer data from internal systems demanded money on 2025-05-11. No passwords, private keys or customer funds were accessed, and Coinbase estimated related expenses at $180 million to $400 million.
- Protocol
- Coinbase (customer data theft and extortion)
- Type
- Other
- Reported loss
- not stated
Facts and where they come from
Primary sources
- Coinbase Global Form 8-K, Item 1.05 (sec.gov) ↗ official announcement · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram