Coinbase Targeted in $20 Million Extortion Plot, User Data Stolen

Cryptocurrency exchange Coinbase has become the target of a $20 million extortion plot orchestrated by cybercriminals who exploited its customer support system. The attackers lured overseas customer service agents into providing access to internal systems through bribery, compromising data on a small fraction of users. The incident highlights a growing trend of insider threats in the crypto industry and underscores Coinbase’s ongoing efforts to bolster security protocols against such attacks. Despite refusing to pay the ransom demanded, Coinbase is offering a $20 million reward for information leading to the conviction of those responsible. The stolen data includes personal details like names, addresses, and IDs for a subset of users. While no passwords or private keys were compromised, Coinbase has taken steps to secure its operations after the breach, including tightening internal access controls and relocating certain support functions to minimize further exposure.