Cryptocurrency exchange Coinbase has reported a data breach affecting at least 69,461 customers, according to a filing with Maine’s attorney general on May 21, 2025.

The breach began on December 26, 2024, and continued until earlier this month. The company said that a hacker bribed customer support employees to access sensitive customer information.

This information includes names, email addresses, phone numbers, postal addresses, government-issued identification, account balances, and transaction histories.

Coinbase also reported receiving a ransom demand of US$20 million for the deletion of the stolen data, which it refused to pay.

The breach raises concerns about the potential targeting of affluent customers due to exposed account information. Coinbase has not provided additional details regarding the measures taken to address the breach.

🔗 Source: TechCrunch

🧠 Food for thought

1️⃣ Cryptocurrency exchanges show persistent vulnerability despite years of high-profile breaches

Coinbase’s breach affecting over 69,000 customers continues a concerning pattern that has plagued major exchanges for nearly a decade.

Since 2014, the industry has suffered catastrophic security incidents, including Mt. Gox’s loss of 850,000 Bitcoin 1, Coincheck’s US$534 million theft in 2018 2, and Binance’s US$40 million breach in 2019 3.

Despite these lessons, exchanges continue to struggle with similar vulnerabilities, particularly around “hot wallet” storage (connected to the internet) and insider threats, as demonstrated by the bribed customer support workers in Coinbase’s case.

The recurring nature of these breaches highlights a significant gap between security practices and the growing sophistication of attacks targeting the $1+ trillion cryptocurrency market.

While blockchain technology itself remains largely secure, the centralized platforms that provide access to it have repeatedly proven to be points of failure, with cryptocurrency exchanges losing an estimated $950 million to hackers in 2018 alone 4.

2️⃣ Social engineering emerges as the favored attack vector against modern exchange defenses

Coinbase’s breach reveals how attackers are increasingly targeting human vulnerabilities rather than technical systems.

The successful bribing of customer support workers to access internal systems marks a shift from purely technical exploits to social engineering attacks that exploit human psychology and insider access 5.