Coinbase CEO Brian Armstrong is publicly tackling the latest cyber assaults which have focused the corporate's buyer knowledge by means of insider conspiracy and have created $20 million in Bitcoin ransom demand.
In a video assertion shared on X, Armstrong confirmed that Coinbase has obtained threatening emails from cybercriminals claiming to personal delicate buyer info and claiming to have demanding funds to maintain it non-public with Bitcoin.
https://t.co/evpibmfvrw pic.twitter.com/f6updkl5r0
– Brian Armstrong (@brian_armstrong) Could 15, 2025
Armstrong rejected demand altogether and stated the trade wouldn’t comply. As a substitute, the corporate gives a $20 million reward for info that may end in identification, arrest and convictions of these answerable for the assault.
what occurred?
Based on Coinbase, the violation got here from a bunch of abroad buyer assist brokers who had been bribed and recruited by attackers. These fraudulent insiders abused restricted entry rights to retrieve private buyer knowledge corresponding to names, date of delivery and tackle.
The passwords, non-public keys and funds weren’t breached, however the info accessed was used to launch a social engineering assault aimed toward guiding the client to switch the client to an attacker.
The corporate reported that lower than 1% of month-to-month buying and selling customers had been affected. Coinbase admitted that the violation was unacceptable.
As a part of that response, main US exchanges are relocating a few of their buyer assist operations and implementing extra safety measures to extend safety for buyer knowledge.
The trade additionally confirmed that it might be totally refunded to ship funds to deceived prospects because of the assault. Particulars of the refund course of can be found on the corporate's web site.

