cyber
confidence high
sentiment negative
materiality 0.85
Coinbase cyber incident: estimated $180M-$400M remediation costs
Coinbase Global, Inc.
- Threat actor paid multiple contractors/employees to collect customer data from internal systems; incident detected May 11, 2025.
- Compromised data includes name, address, phone, email, masked SSN (last 4 digits), masked bank accounts, government ID images, account balances and transaction history.
- No compromise of passwords, private keys, or customer funds; targeted personnel had no access to customer funds.
- Preliminary estimated expenses of $180M to $400M for remediation and voluntary customer reimbursements.
- Coinbase will reimburse eligible retail customers who sent funds to threat actor as direct result; cooperating with law enforcement.