Coinbase data breach exposes customer info and government IDs

Coinbase disclosed that criminals bribed and recruited rogue support contractors to access internal systems and exfiltrate personal and limited corporate data for up to ~1% of customers (≈1 million), including names, contact details, masked SSNs, masked bank identifiers, government ID images, and account snapshots. Attackers demanded a $20M ransom (which Coinbase refused); the company opened a $20M reward fund to find the attackers, will reimburse retail customers tricked into sending funds via follow-on social engineering, and expects remediation costs of approximately $180M–$400M while strengthening insider‑threat detection and U.S.-based support controls.