Coinbase has confirmed it was the target of a recent cyberattack that compromised user accounts and led to financial losses for some of its customers. The cryptocurrency exchange revealed in a filing with the U.S. Securities and Exchange Commission (SEC) that the company will voluntarily reimburse affected users. Based on a preliminary assessment, Coinbase estimates that the remediation costs could range between $180 million and $400 million. The attack reportedly involved false claims and exploitation of exposed user data.
According to the SEC 8-K filing submitted on May 14, Coinbase clarified that the financial impact remains under review and could vary as additional factors are considered. These factors include potential indemnification claims and any successful recovery efforts. The company emphasized its commitment to strengthening internal safeguards and improving anti-fraud mechanisms to prevent similar breaches in the future. One of the steps being taken is the establishment of a new customer support hub in the United States, alongside other defense enhancements.
Coinbase CEO Brian Armstrong shed more light on the breach, explaining that the attackers managed to bribe offshore support personnel to gain unauthorized access to the personal data of a small fraction of users—reportedly less than one percent. Once in possession of this data, the attackers contacted Coinbase and demanded a ransom of $20 million, threatening to leak the compromised information if the demand was not met. Armstrong has rejected the ransom demand outright, signaling the company’s refusal to engage with cybercriminals.
Instead of yielding to extortion, Armstrong announced the creation of a $20 million reward fund for anyone who can provide verifiable information leading to the identification and capture of the attackers. Coinbase stated in its SEC filing that the threat appeared credible, prompting urgent action to both contain the breach and pursue justice. The incident underscores the increasing sophistication of cyber threats facing digital asset platforms and highlights the importance of robust security measures in the crypto industry.