Coinbase confirms insider breach linked to leaked support tool screenshots

Coinbase confirmed an insider breach in December in which a contractor improperly accessed sensitive information for roughly 30 customers (names, emails, DOB, phone numbers, KYC, wallet balances and transactions); screenshots were briefly posted by a group calling itself "Scattered Lapsus Hunters" though attribution remains unclear. The article situates this event among a growing pattern of attacks against BPOs and outsourced support providers—through bribery, social engineering, or compromised agent accounts—that enable attackers to access corporate customer data and internal tools.