Massive Cyber Attack Hits Coinbase – Customers Scammed Out of Millions

A sophisticated cyber attack has shaken one of the world’s largest cryptocurrency exchanges, Coinbase.

Although only 1% of customer data was exposed, the damage is extensive: customers have been scammed out of their digital assets, trust has been compromised, and Coinbase now anticipates a financial loss of up to a staggering $400 million.

The attack was first discovered when the company received an email from an unknown hacker on May 11th.

The hacker claimed to have gained access to customer information by paying employees and subcontractors for confidential data.

This information was then used to impersonate Coinbase and lure users into transferring cryptocurrency to the attacker’s accounts.

Coinbase Fights Back with Bounty and Compensation

The hacker group attempted to extort $20 million from Coinbase with threats of publicizing the stolen information.

Instead, the company took a different route: It rejected the demands and announced a bounty of the same amount for information leading to the arrest and conviction of the perpetrators.

“We will reimburse the customers who were scammed, and we will work closely with authorities to ensure the perpetrators are brought to justice,” said Coinbase in a statement. Employees who were complicit in the data breach have been terminated.

Stock Price Dips Ahead of Major Milestone

News of the attack and the potential loss of between $180 and $400 million quickly made waves on the stock market.

Coinbase’s stock fell by 4.1%, just days before the company is set to be included in the S&P 500 index—a milestone that was otherwise seen as a triumph for the crypto industry.

According to the analysis firm Chainanalysis, over $2.2 billion in cryptocurrency was stolen in 2024. “Security remains a challenge for the crypto industry despite increasing mainstream acceptance,” Nick Jones, founder of Zumo, told the BBC.

Warning to Customers: Stay Vigilant

Coinbase emphasizes that customers can expect further fraud attempts and urges increased vigilance.

The firm reminds users that they will never ask for passwords, 2FA codes, or transfers to new addresses or accounts.

“To the affected customers: We apologize for the inconvenience and insecurity this has caused. We will continue to take responsibility when issues arise,” the company stated.

Our team may have used AI to assist in the creation of this content, which has been reviewed by our editors.