Recommended Free Tools
Short answer: Coinbase disclosed a May 2025 security incident in which support-service personnel improperly accessed customer information. The public disclosure did not describe a compromise of Coinbase’s private keys or a theft from Coinbase-controlled wallets. Whether you have a claim depends on what happened to you: data exposure, an account takeover, an unauthorized withdrawal, or a scammer impersonating Coinbase are legally different events.
As of August 18, 2026, federal cases have been consolidated as In re Coinbase Customer Data Security Breach Litigation, MDL No. 3153. The available sources do not establish a certified class, final judgment, settlement, or guaranteed payment. This article is general information, not legal advice; deadlines and remedies vary by jurisdiction.
What happened in the May 2025 Coinbase incident?
Coinbase reported the incident in a May 14–15, 2025 SEC filing. It said individuals providing overseas support services improperly accessed customer information, that the access had been detected in prior months, that Coinbase did not pay the attacker’s ransom demand, and that it was cooperating with law enforcement. The filing did not say that Coinbase’s private keys or customer wallets were penetrated. Read the SEC filing.
Potentially affected information reportedly included customer-support and identity-verification data. That is a data-security incident, not proof that every Coinbase account was taken over or that every cryptocurrency loss resulted from Coinbase.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
Four events that are often called a “Coinbase hack”
- May 2025 data incident: customer information was improperly accessed through support-related personnel.
- Individual account takeover: someone entered an account, changed security settings, traded, or withdrew assets.
- Compromised email, phone, device, or password: an attacker used control of another account or credential to reach Coinbase.
- Impersonation or social-engineering scam: a victim was persuaded to disclose information or send cryptocurrency.
The cause affects the evidence, causation analysis, contractual defenses, and possible remedy.
How to check whether Coinbase notified you
Coinbase says customers it knows were affected received an email from [email protected] with the subject “Important Notice.” It says that customers who did not receive that notice have no evidence their information was included in this specific incident, although concerned customers may contact [email protected]. See Coinbase’s account-loss and security guidance.
- Search the email account associated with Coinbase for “Important Notice,” “Coinbase security incident,” “security incident,” and the sender address above.
- Do not click a link or call a number in a suspicious message.
- Open the Coinbase app or manually enter the official Coinbase domain, then compare any notice with Coinbase’s help information.
- If uncertain, use the logged-in support flow rather than contact details supplied by an unsolicited caller.
A suspicious email alone does not prove you were affected; it may be unrelated phishing.
Secure funds and identity immediately
If money may be moving
- Use Coinbase’s official account-security or account-loss process to lock or secure the account.
- From a trusted device, change the Coinbase password and the password for the associated email account.
- Protect email with a passkey or strong two-factor authentication. Contact your mobile carrier immediately if a SIM swap is possible.
- Revoke unfamiliar sessions, devices, API keys, and connected applications. Review withdrawal addresses and security-setting changes.
- Save transaction hashes, destination addresses, timestamps, device information, emails, and support-ticket numbers.
- Report the loss to Coinbase and appropriate law-enforcement agencies.
Never give anyone a password, two-factor code, API key, private key, or seed phrase. Coinbase says it will not call or text you to request credentials or instruct you to move assets to a “secure” wallet. Its warnings are available at Coinbase’s social-engineering guidance and email-header guidance.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteIf identity information may be exposed
- Place a credit freeze with Equifax, Experian, and TransUnion. Add a fraud alert where appropriate.
- Monitor credit reports, bank accounts, tax accounts, and existing credit lines. A freeze helps block many new-credit accounts but does not stop account takeover, tax fraud, existing-account fraud, or cryptocurrency theft.
- Replace compromised identity documents when warranted and keep receipts.
- Report identity theft through IdentityTheft.gov. For a fraudulent Coinbase Form 1099, Coinbase directs users to the IRS Identity Theft Central.
What kind of loss do you have?
| Situation | Main legal and practical issue |
|---|---|
| Personal data exposed | Notification, privacy, identity-theft injury, and whether you can prove legally recognized harm. |
| Coinbase account accessed | Security controls, credential history, causation, and the applicable user agreement. |
| Cryptocurrency withdrawn without authorization | Transaction hashes, login and 2FA events, device evidence, Coinbase’s response, and whether a security failure caused the transfer. |
| Funds sent to a scammer | Impersonation, third-party criminal conduct, warnings, account controls, and your own actions. |
| No documented loss | Mitigation may still be sensible, but standing, causation, and damages can be difficult to establish. |
Coinbase’s legal materials distinguish unauthorized access caused by compromised customer credentials from covered security events. An account loss therefore does not, by itself, establish Coinbase liability. Review Coinbase’s legal disclosures.
Can you sue Coinbase?
Complaints described in the federal litigation assert negligence, gross negligence, breach of implied contract, unjust enrichment, delayed-breach-notification statutes, and state consumer-protection claims. These are allegations, not findings that Coinbase is liable. See the litigation disclosure.
An individual claim generally requires a fact-specific showing that:
- Coinbase owed you a legal or contractual duty;
- it failed to use legally adequate security or notification practices;
- your information or account was actually affected;
- the alleged failure caused your injury; and
- the damages are recoverable under the governing state law and contract.
Receiving a breach notice does not automatically create a cash award. A person with no evidence of affected information or legally recognized injury may face standing, causation, or damages problems.
Class action, arbitration, small claims, or an individual case?
The existing federal litigation
The Judicial Panel on Multidistrict Litigation transferred and consolidated cases as In re Coinbase Customer Data Security Breach Litigation, MDL No. 3153, in the Southern District of New York. Read the transfer order. The litigation is described as a putative class action. “Putative” means a court has not certified a class. Eligibility, arbitration rights, releases, deadlines, and later court orders may affect any person’s options. Do not pay an unsolicited “claims administrator.”
What the current U.S. agreement says
Coinbase’s current U.S. User Agreement generally provides for binding arbitration, includes a class-action and other non-individualized-relief waiver, and preserves a small-claims exception subject to the agreement and court rules. It also addresses AAA and JAMS procedures and forum selection for disputes that are not arbitrated. The agreement in force when your account or dispute arose may differ from the version now displayed; save the current terms, but have counsel compare earlier versions. Read the current U.S. User Agreement.
Complete Coinbase’s required process before filing
Under the current agreement, a customer must contact Coinbase Support and complete the Formal Complaint Process before beginning arbitration or a small-claims action. Coinbase says that process ends when it responds or 45 business days after receiving the complaint, whichever occurs first. Failure to complete it can lead to dismissal.
- Contact Coinbase Support through the official account or support experience and obtain a case number.
- Submit the formal complaint form.
- Describe what happened, when it happened, which account or data was affected, your losses, the remedy requested, and the support case number.
- Save the complaint, acknowledgment, attachments, and proof of submission.
- Wait for Coinbase’s response or the contractual 45-business-day period.
- Then evaluate arbitration, small claims, or counsel-led litigation under the applicable agreement and law.
Evidence checklist
- Incident-notification email, including full headers.
- Account alerts, login and device history, password-reset and 2FA-change messages.
- Support transcripts, case numbers, reimbursement offers, and denials.
- Account transaction history, blockchain hashes, destination addresses, and timestamps.
- Bank or card records and copies of identity documents that may have been exposed.
- Credit-report changes, fraudulent accounts, identity-theft expenses, replacement-document costs, lost wages, and time records.
- Police, FTC, IRS, and state-agency reports.
- The Coinbase User Agreement version that applied when the incident or loss occurred.
- Records showing when you learned of the incident and when Coinbase notified you.
Do not upload complete identity documents to an unknown lawyer, recovery company, or social-media contact merely because it claims to investigate the breach.
What damages might matter?
Depending on governing law and proof, relevant categories may include unauthorized withdrawals, account-restoration costs, identity-monitoring or document-replacement expenses, fraudulent-account losses, lost wages or response time, security expenses, emotional distress where recoverable, reduced value or usefulness of personal information where recognized, statutory damages, and attorneys’ fees where authorized. Courts often distinguish actual injury and reasonable mitigation costs from speculative future risk. Cryptocurrency transfers are generally difficult to reverse; recovery depends on tracing, exchange cooperation, law enforcement, and the facts.
When professional legal help may be worthwhile
Consider an independently verified consumer-protection, data-breach, cryptocurrency-fraud, or arbitration lawyer if you have a substantial unauthorized transfer, documented identity theft, multiple affected accounts, complicated credential or device evidence, or a dispute over arbitration and the governing agreement. Verify the lawyer through the relevant state bar and ask which entity, if any, they represent. No lawyer or recovery service can guarantee recovery, and no reliable attorney pricing or contingency percentage is established here.
Recognize recovery and impersonation scams
- Guaranteed recovery or a guaranteed settlement payment.
- Upfront cryptocurrency, “tax,” “gas,” court, or blockchain-tracing fees.
- Requests for seed phrases, passwords, 2FA codes, remote computer access, or transfers to another wallet.
- Claims that you are already approved for a settlement.
- Pressure to sign a release immediately or send identity documents before verifying the organization.
Independently verify any firm through a state bar, court docket, or official settlement notice. Coinbase’s published guidance confirms that it will not request credentials or instruct customers to move assets to a secure wallet.
The Bottom Line
Secure the account and email first, freeze credit when identity information may be exposed, preserve every record, and complete Coinbase’s formal complaint process before considering arbitration or small claims. The May 2025 incident and the MDL do not automatically establish liability or compensation for every person who lost funds.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
