Photo Credit: X/ @coinbase 696c21
Coinbase claims that no private keys have been compromised
Coinbase recently disclosed a cyberattack on its network. As part of the attack, cybercriminals managed to steal funds from exposed s under false claims. The crypto exchange said it will voluntarily reimburse s affected by the data breach. In a filing with the US Securities and Exchange Commission (SEC), the exchange preliminarily estimated that these remediation expenses could range between $180 million (roughly Rs. 1,541 crore) and $400 million (roughly Rs. 3,426 crore).
The firm submitted its 8-K filing to the SEC on May 14. It said that the losses it has estimated based on preliminary analysis could increase or decrease after a thorough review of other factors is conducted. These include indemnification claims and potential recoveries.
"The company is continuing to review and bolster its anti-fraud protections to mitigate the risk that the compromised information could be used in social engineering attempts. The company is also in the process of opening a new hub in the United States and taking other measures to harden its defenses to prevent this type of incident," the filing noted.
Brain Armstrong said cyber criminals managed to bribe some overseas agents of the company to gain access to the personal data of "less than one percent of its s."
As per Armstrong, the attackers reached out to the exchange claiming possession of this data and demanded a ransom of $20 million (roughly Rs. 171 crore) for not leaking the data. The company CEO has refused to surrender to this ransom demand. Instead, he announced a $20 million (roughly Rs. 171 crore) reward fund inviting information on these attackers.
"Since receipt of the email, the Company has assessed the email to be credible," the exchange said in its filing.
Coinbase, in a blog post, claimed that the insiders who were found involved with the incident have been fired for abusing their access to customer systems and stealing their data.
The attackers have managed to obtain details including the bank numbers, government IDs, and the data of the impacted s. Other details such as names, addresses, emails, and masked social security numbers have also been breached as part of this incident.
The company does, however, claim that no s, private keys, or funds were exposed in the breach. As per a Bloomberg report, the US SEC is also part of the ongoing probe into the incident.
https://t.co/evpIBMFvRW pic.twitter.com/f6UPdkL5R0
— Brian Armstrong (@brian_armstrong) May 15, 2025
Following Coinbase's disclosure of the incident, its stocks reportedly fell by more than six percent.
Coinbase has yet to disclose the exact amount of funds its s ended up sending to the attackers. It also remains uncertain if the data breach only affected Coinbase s in the US or if international s were also impacted.
"While Coinbase has not experienced material operational impacts from these events as of the date hereof, the full financial impact of the Incident on the company is still in the process of being assessed," it added in its SEC filing.
For the latest reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.