Crypto Company Hit For $400m

The world’s third largest crypto-currency firm Coinbase Global has said that a recent cyber attack will probably cost it around $400m (£301m). 

The firm was contacted by hackers who said they had gained access to customer information, obtained by making payments to Coinbase contractors and employees.

Breached data included names and contact information, partial social security and bank account identifiers, government identification images, and some corporate and account data. The disclosure prompted the firm's share price to fall by 4.1%.

The alleged cyber attacker, who demanded money to not disclose the information, appeared to bribe overseas Coinbase employees to obtain the files, the company said. “Criminals targeted our customer support agents overseas. They used cash offers to convince a small group of insiders to copy data in our customer support tools for less than 1% of Coinbase monthly transacting users.

“Their aim was to gather a customer list they could contact while pretending to be Coinbase, tricking people into handing over their crypto,” Coinbase said on their blog. The group then demanded $20m from Coinbase to keep it quiet, but it refused to pay the bribe and instead promised to refund every person who got scammed.

The cyber attack comes days before the US company is set to join the benchmark S&P 500 index, a landmark moment for the crypto industry. It also reflects how, as it grows, the industry has increasingly become a target for cyber criminals.

Following the attack, the exchange says that it will strengthen its internal data management processes and relocate some of its customer support operations to avoid similar incidents.

A report from research firm Chainalysis suggests funds stolen from crypto businesses totalled $2.2bn in 2024.

 Coinbase   |    BBC   |    Reuters     |   Coin Telegraph   |    MSN   |   9to5Mac   |   Chainalysis

You Might Also Read:

Biggest Data Breaches Of The Last 15 Years [extract]:


If you like this website and use the comprehensive 8,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Recent Ransomware Attacks Have Focused On Identity Gaps
Kill Switches Secretly Installed In Solar Panels »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

IBackup

IBackup

IBackup is a Web Based Online Backup service provider.

NESEC

NESEC

NESEC is a specialist in information security consulting services and solutions.

Halon

Halon

Halon is a flexible security and operations platform for in-transit email.

Codeproof Technologies

Codeproof Technologies

The Codeproof enterprise mobility solution empowers your business to secure, deploy and manage mobile applications and data on smartphones, tablets, IoT devices and more.

CyberProof

CyberProof

CyberProof aims to give clarity and confidence to businesses worldwide using a new risk-based approach to cyber security services.

North European Cybersecurity Cluster (NECC)

North European Cybersecurity Cluster (NECC)

NECC promotes information security and cybersecurity-related cooperation and collaboration in the Northern European region in order to enhance integration into the European Digital Single Market.

WiSecure Technologies

WiSecure Technologies

WiSecure Technologies aims to develop cryptographic products meeting requirements in the new economic era.

Bitfury Group

Bitfury Group

Bitfury Group is the largest full-service blockchain technology company in the world.

NetNordic Group

NetNordic Group

NetNordic is a Nordic system integrator focusing on solutions and services in the area of networking, smart data centers, cybersecurity, and unified communication.

InsightCyber

InsightCyber

InsightCyber is on a mission to keep the world’s critical infrastructure, supply chains, and manufacturing operations cyber-safe, helping to prevent attacks that can have catastrophic impacts.

Canopius Group

Canopius Group

Canopius is a global specialty lines insurance and reinsurance company and one of the top 10 insurers in the Lloyd’s insurance market.

IT-Seal

IT-Seal

IT-Seal GmbH specializes in sustainable security culture and awareness training.

Mindaro Insurance

Mindaro Insurance

Mindaro is adding the crucial piece of the cyber security puzzle that protects your organization from the financial ramifications of cyber attacks.

Cyber Explorers

Cyber Explorers

Cyber Explorers is a fun, free and interactive learning platform for future digital superstars. An exciting addition to UK curriculum delivery or after school activities.

EmberOT

EmberOT

EmberOT is at the forefront of operational technology (OT) security, offering cutting-edge solutions designed to protect critical infrastructure within energy, utilities, and manufacturing sectors.

Whiteswan Identity Security

Whiteswan Identity Security

At Whiteswan, we are committed to protecting the digital landscapes of modern enterprises with adaptive, identity-first security solutions that ensure trust, compliance, and resilience.