Coinbase, a cryptocurrency exchange, experienced a data breach starting in December 2024. The breach involved unauthorized access to customer data through bribed employees and contractors in India who provided unauthorized access to customer data. Coinbase detected the issue, quarantined and fired the implicated agents, and pulled their access shortly after discovery.
Personal identifiable information such as names, dates of birth, addresses, nationalities, government-issued ID numbers, and some banking information were exposed. Additionally, customer account creation dates and account balances were compromised. Over 69,000 customers were affected, although the specific states affected within the US are not currently known. It remains unclear precisely when consumers were notified of the breach.
Details about data breaches can emerge over time, and notices to affected individuals may be delayed as investigations continue.