FEDERALItem 1.05 · mandatoryMisuseFinancial ServicesTechnologyFinancePrivilege AbuseData MishandlingData ExfiltratedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedMulti-Stage ChainTargetedPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIALMediumContained
COINBASE, INC.
bd_6b9a0642ea872c25 · schema v1 · pii pii-v1
Full breach record for COINBASE, INC. →Coinbase, Inc. disclosed a material incident (Item 1.05) filed May 15, 2025. Overseas contractors/employees were bribed to exfiltrate customer and internal data. Compromised data: names, addresses, masked SSNs, masked bank accounts, government IDs, transaction history. No passwords, private keys, or fund access. Coinbase refused extortion demand and cooperated with law enforcement. Estimated remediation/reimbursement costs: $180M-$400M.
SEC clockMateriality determined May 14, 2025 → Filed May 15, 20251d ✓ SEC 4-day OK
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2406100bb1153d9eCalifornia State AGfiled 2025-05-20(5d gap)Verified
- bd_6fcf4d20742c3a72Montana State AGfiled 2025-05-20(5d gap)Verified
- bd_7388d192de2195c0Washington State AGfiled 2025-05-20(5d gap)Verified
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- May 15, 2025
- Raw hash
- 840c316bd619fe46fd3d0635f17d9102c0243a3b34cb98ce1402713aa41de19b
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- COINBASE, INC.norm: coinbase
- SEC CIK
- 0001679788
- Domain
- coinbase.com
- Industry
- Cryptocurrency Exchange
Victim entity
- Name
- COINBASE, INC.norm: coinbase
- SEC CIK
- 0001679788
- Domain
- coinbase.com
- Industry
- Cryptocurrency Exchange
- Industry
- Financial ServicesllmTechnologyllm
Incident
- Discovered
- —
- Materiality determined
- May 14, 2025
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid AccountsT1074 Data StagedT1041 Exfiltration Over C2 Channel
- Threat actor
- MultipleFinancial
- Regulator citations
- cooperating with law enforcement
- Initial access
- insider_action
Compliance
- Compliance flags
- SEC 4-day OK · 1d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: May 14, 2025→ Filed: May 15, 20251d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.