{"id":30286,"date":"2025-06-04T22:01:33","date_gmt":"2025-06-04T22:01:33","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=30286"},"modified":"2025-06-04T22:01:33","modified_gmt":"2025-06-04T22:01:33","slug":"coinbases-400-million-breach-what-really-happened-and-how-did-customers-get-exposed","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=30286","title":{"rendered":"Coinbase\u2019s $400 Million Breach: What Really Happened And How Did Customers Get Exposed?"},"content":{"rendered":"
\n

Coinbase\u2019s $400 million data breach<\/a> is again in the spotlight after new information came to light about the company\u2019s prior knowledge of the leak. The COIN stock<\/a> is still up over 4% from yesterday\u2019s trading session despite this new development.\u00a0<\/p>\n

Coinbase Was Aware Of the Data Breach Since January<\/h2>\n

According to a Reuters report<\/a>, crypto exchange Coinbase was aware of the $400 million customer data leak<\/a> as early as January. The report revealed that at least one part of the breach occurred when an India-based employee of the exchange\u2019s outsourcing firm, TaskUs, was caught taking photographs of her work system with her phone.\u00a0<\/p>\n

Coinbase had revealed in a May 14 SEC filing<\/a> that it had received an extortion email from the threat actors who were in possession of the leaked data. The exchange stated that the threat actor appeared to have obtained this information by paying multiple overseas contractors or employees to collect this information from internal Coinbase systems<\/a>.\u00a0<\/p>\n

Furthermore, in the filing, Coinbase only mentioned that they had independently detected this data breach in the \u201cprevious months,\u201d without stating when exactly they first had knowledge of it. Meanwhile, it assured that the improper data access was part of a single campaign and that the incident did not involve the compromise of passwords or private keys.\u00a0<\/p>\n

Coinbase stated that the affected data includes personal details, masked Social Security numbers, government ID images, account data, and limited corporate information. The crypto exchange<\/a> had also fired the personnel involved in the data breach and warned affected customers about the breach. The exchange estimated the preliminary expenses in the breach to be between $180 million and $400 million for remediation costs and voluntary customer reimbursements.\u00a0<\/p>\n

The Reuters report mentioned that over 200 TaskUs employees were later fired in a mass layoff that drew Indian media attention. Based on the SEC filing, Coinbase had totally cut ties with TaskUS as the exchange revealed that it was in the process of opening a new support hub in the US. The exchange claimed that it has also taken other measures to harden its defenses to prevent this type of incident.\u00a0<\/p>\n

The Exchange\u2019s Legal Battle Against Oregon<\/h2>\n

Amid this data breach, Coinbase is also battling a lawsuit<\/a> against Oregon for the alleged sale of unregistered securities. In an X post<\/a>, the exchange\u2019s Vice President of Legal, Ryan VanGrack, commented on their decision to move for the case to be transferred to a federal court. He explained that the case is fundamentally about federal law, which is the reason for this move.\u00a0<\/p>\n

VanGrack added that Oregon\u2019s Attorney General<\/a> would undermine recent bipartisan progress towards crypto clarity by creating a \u201cpatchwork\u201d of state regulations that harm consumers, innovation, and economic freedom. Coinbase\u2019s Chief Legal Officer (CLO), Paul Grewal, noted<\/a> that Oregon\u2019s claims raise fundamentally federal issues like the meaning of \u201cinvestment contract,\u201d and so they should be resolved by federal courts.<\/p>\n

\"Coinbase\"<\/div>\n","protected":false},"excerpt":{"rendered":"

Coinbase\u2019s $400 million data breach is again in the spotlight after new information came to light about the company\u2019s prior knowledge of the leak. The COIN stock is still up over 4% from yesterday\u2019s trading session despite this new development.\u00a0 Coinbase Was Aware Of the Data Breach Since January According to a Reuters report, crypto […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-30286","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/30286","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=30286"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/30286\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=30286"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=30286"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=30286"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}