Coinbase says rogue overseas support personnel accessed customer information without a business need and supplied it to criminals. A breach notification reported by TechCrunch and SecurityWeek identified 69,461 affected customers. Coinbase said passwords, private keys and customer funds were not accessed, but the exposed information could make phishing, impersonation, SIM-swap and account-takeover scams far more convincing.
The incident was disclosed in a May 2025 SEC filing. As of August 16, 2026, the available disclosures confirm the original incident, the 69,461-customer figure and Coinbase’s remediation measures, but do not establish a final settlement, regulatory outcome or revised total.
What happened in the Coinbase breach?
According to Coinbase’s SEC filing, criminals allegedly bribed or recruited support personnel working outside the United States. Those personnel used legitimate access to Coinbase support systems to collect customer information without a valid work-related reason.
Coinbase said its monitoring had detected improper access by some personnel in the preceding months. On May 11, 2025, an unknown threat actor contacted the company, claimed to possess customer and internal data, and demanded $20 million to keep it private. Coinbase said it refused to pay, terminated the personnel involved and cooperated with law enforcement.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
This was an insider-enabled data breach, not a reported compromise of Coinbase’s blockchain custody systems or a theft of private keys.
How many customers were affected?
A breach notification reported by TechCrunch and SecurityWeek identified 69,461 customers nationwide. That number comes from the notification filing and should not automatically be treated as an independently audited global total or as proof that every person had the same categories of information exposed.
What information may have been exposed?
Coinbase’s SEC disclosure listed several categories of information that personnel could access. The exact combination varied by customer and was not stated to be identical for all 69,461 people.
- Names, addresses, phone numbers and email addresses
- The last four digits of Social Security numbers
- Masked bank-account numbers and some bank-account identifiers
- Images of government identification, including driver’s licenses and passports
- Account-balance snapshots and transaction history
- Limited corporate information, such as support documents, training material and communications
Masked numbers and partial identifiers are not the same as complete credentials, but they can help a criminal pass basic verification checks or make a pretext sound authentic. A person who knows a customer’s name, phone number, identity-document details, balance and recent transaction history can construct a highly personalized impersonation.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Were Coinbase passwords or crypto funds hacked?
Coinbase said the incident did not expose passwords or private keys and that the personnel involved could not access customer funds. That is the company’s stated assessment in its SEC disclosure; it does not mean affected customers face no danger.
The principal risk is social engineering. A scammer may pose as Coinbase support, a compliance investigator or an identity-protection provider and use real-looking account details to persuade a victim to reveal a one-time code, install remote-access software or transfer cryptocurrency to a so-called safe wallet. A transfer that the customer authorizes after deception can occur even when Coinbase’s custody systems and passwords were not breached.
Why the exposed data is especially useful to scammers
The combination of identity documents, contact details, balances, transaction history and knowledge that a person uses Coinbase gives attackers context that ordinary phishing messages lack. It can support:
- Targeted email, text and voice phishing
- Fake account-verification or tax-compliance requests
- SIM-swap and phone-number takeover attempts
- Fake security calls referring to a real balance or transaction
- Fraudulent “recovery” services aimed at people who already lost funds
There is no evidence in the cited disclosures that every affected customer will suffer fraud or that the information was publicly posted. The defensible concern is that the data could facilitate targeted social-engineering attacks.
Recommended Free Tools
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How to tell whether Coinbase notified you
Coinbase says it emailed customers whose information it knew had been improperly accessed. Its support guidance identifies the message as coming from [email protected] with the subject line “Important Notice.” If you did not receive that notice, Coinbase says it had no evidence your information was part of this specific incident. That is not a guarantee against unrelated phishing or another security event.
Verify any notice independently:
- Do not use links or phone numbers in an unexpected message.
- Open Coinbase through a known bookmark, the official app or a manually entered address.
- Use the support instructions at Coinbase’s account-loss page if you need to report activity.
Coinbase says it will not call and instruct you to move funds to a particular destination. Never provide a password, two-factor code, seed phrase or private key to someone who contacts you.
What affected users should do now
Secure the Coinbase account
- Change your Coinbase password if it is reused anywhere else. Create a unique password and store it in a reputable password manager.
- Confirm that two-factor authentication is enabled. Where supported and practical, prefer an authenticator app or hardware security key over SMS; retain recovery methods securely.
- Review recent sign-ins, devices, withdrawals, payment methods, API keys, account settings and support interactions.
- Contact Coinbase through an official channel immediately if you see unauthorized activity or lost funds.
- Save emails, texts, caller numbers, screenshots, wallet addresses, transaction hashes and other evidence.
Protect your wider identity
- Use the free monitoring service described in your official breach notice, if you are eligible. Follow the letter’s enrollment URL or code rather than a link supplied by a stranger.
- Consider placing a security freeze with the major credit bureaus if identity-document or Social Security information may have been exposed. A freeze can prevent many new-credit accounts, although it adds friction when you apply for credit.
- Check credit reports for unfamiliar accounts, inquiries, addresses or name changes, and set alerts with banks and financial institutions.
- Ask your mobile carrier to add an account PIN or port-out protection and watch for sudden loss of cellular service.
Credit monitoring can alert you to some activity after it occurs; it cannot prevent every phishing attack, account takeover or blockchain transfer.
Recognize follow-on scams
- Do not disclose one-time passcodes or install remote-access tools.
- Do not move assets to a “safe” wallet at someone else’s direction.
- Verify identity-monitoring enrollment pages independently; fake IDX pages may imitate the breach offer.
- Reject anyone claiming to be a Coinbase investigator or recovery specialist who demands an upfront payment.
What Coinbase offered affected customers
Coinbase described enhanced fraud monitoring, stronger support-operation controls and a new U.S. support hub. It also announced a $20 million reward fund for information leading to the arrest and conviction of those responsible.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
The company said it would review reimbursement for eligible retail customers who sent funds directly to the attacker because of this incident. That is not an automatic promise to reimburse every loss; Coinbase reserved the right to investigate eligibility and causation.
Breach-notice reporting said affected users were offered one year of IDX credit monitoring and identity-protection services. Use the instructions in the official Coinbase letter. IDX explains breach-plan enrollment at its enrollment guide and its services at its breach-response page.
For context, IDX’s consumer page displayed these prices when reviewed; they are not necessarily the price or terms of Coinbase’s breach-specific offer:
| IDX plan | Monthly individual price | Annual-billing monthly equivalent |
|---|---|---|
| Identity Essentials | $9.95 | $8.96 |
| Complete | $32.90 | $29.61 |
| Privacy | $12.95 | $11.66 |
Prices and features can change; confirm current terms at IDX’s consumer-plans page. Paid monitoring may add dark-web alerts, recovery assistance or insurance, but it does not recover cryptocurrency sent to a scammer and may duplicate free freezes and credit alerts.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallBest Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What to do if money was already lost
Unauthorized Coinbase activity
Secure the account and contact Coinbase immediately through official support. Preserve all evidence and change reused credentials.
You sent funds after being deceived
Report the incident to Coinbase and relevant law-enforcement or fraud-reporting authorities. Keep the transaction hash, destination address, communications and timeline. Cryptocurrency transfers may be irreversible; recovery depends on the facts, blockchain, destination and cooperation from exchanges or investigators.
A “recovery” service asks for another payment
Do not pay. People who have already lost cryptocurrency are frequent targets for secondary recovery scams.
What remains unresolved
The available disclosures do not establish whether the 69,461 figure later changed, the complete duration or geographic scope of improper access, whether all listed data was copied rather than viewed, the final cost of remediation, or a final legal or regulatory outcome. Coinbase’s 2025 annual report continues to describe possible social-engineering, compensation, monitoring, regulatory and litigation exposure; it does not provide a final resolution.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
