Coinbase breach linked to India customer data leak: sources

Cryptocurrency exchange Coinbase was aware of a customer data breach at its outsourcing partner, TaskUs, as early as January, according to sources.

The breach is part of a larger incident estimated to cost up to US$400 million.

It involves an employee from TaskUs in India allegedly leaking customer information to hackers for bribes.

Coinbase publicly disclosed the incident in a May 14, 2025 SEC filing.

The company said that contractors had accessed employee data “without business need” in previous months.

They only recognized the breach was part of a broader campaign after receiving an extortion demand on May 11, 2025.

🔗 Source: Reuters

🧠 Food for thought

1️⃣ Cryptocurrency exchanges remain vulnerable despite historical lessons

Coinbase’s $400 million breach follows a well-established pattern of security incidents that have plagued the cryptocurrency exchange industry for over a decade.

Since 2011, major exchanges have suffered devastating attacks, including Mt. Gox’s 2014 breach ($350 million lost), Coincheck’s 2018 hack ($532 million), and Bitfinex’s 2016 incident ($72 million) 1.

The cryptocurrency industry lost approximately $1.1 billion to exchange hacks in just the first half of 2018 alone, demonstrating the persistent vulnerability of these platforms despite growing awareness of security risks 1.

This latest Coinbase incident shows that even as the industry has matured and security practices have evolved, cryptocurrency exchanges continue to be prime targets for sophisticated attacks that result in nine-figure losses.

What’s particularly concerning is that despite these historical lessons, the financial magnitude of breaches hasn’t diminished. Coinbase’s $400 million estimated loss is comparable to the industry’s largest previous incidents, suggesting limited progress in risk mitigation.

2️⃣ Insider threats represent an evolving attack vector beyond technical exploits

While early cryptocurrency exchange breaches typically involved direct technical attacks exploiting code vulnerabilities, the Coinbase incident represents a significant shift toward human-centered security risks.