Coinbase Customer Data Exposed in Analytics Vendor Breach, Funds 'Not Impacted'

Coinbase said it had found no evidence of unauthorized access to its systems and that customer funds were “not impacted.” It is notifying affected customers and regulators in line with its legal obligations.

Coinbase's 2025 breach

Coinbase disclosed a far more serious incident in May 2025, when it said cybercriminals had bribed overseas customer support agents to steal personal data belonging to less than 1% of its monthly transacting users. The exchange refused a $20 million ransom demand and instead offered a $20 million bounty for information leading to the attackers' arrest.

A later filing with the Maine attorney general put the number of affected customers at 69,461, with data including names, addresses, masked Social Security numbers and government ID images exposed.

Crypto firms have repeatedly seen customer data exposed through partners. In September, hardware wallet maker Trezor said a breach at shipping provider ShipMonk had exposed the names, phone numbers and home addresses of 67,000 U.S. customers, on top of nearly 14,000 it had disclosed in August. Some of the records dated back to 2019, years after ShipMonk had told Trezor they were deleted. Trezor warned affected customers to watch for fake emails, calls and letters, and about risks to their physical security.

At the time, cybercrime consultant David Sehyeon Baek told Decrypt that a letter carrying a name and home address signals "we can locate you," and that stolen data stays useful for years because people rarely move or change their numbers.