Coinbase, Inc. data breach (2025)

FEDERALSEC 8-KFirst filing

Filed May 15, 2025bd_6b9a0642ea872c25

Coinbase, Inc. disclosed a material incident (Item 1.05) filed May 15, 2025. Overseas contractors/employees were bribed to exfiltrate customer and internal data. Compromised data: names, addresses, masked SSNs, masked bank accounts, government IDs, transaction history. No passwords, private keys, or fund access. Coinbase refused extortion demand and cooperated with law enforcement. Estimated remediation/reimbursement costs: $180M-$400M.

SEC 4-day OK · 1d

🐻California State AGlinked via same-victim cross-source · 100%

🦬Montana State AGlinked via same-victim cross-source · 100%

Filed May 20, 2025bd_6fcf4d20742c3a72

Coinbase Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2025-05-20. The breach occurred on 05/11/2025. 160 Montana residents were affected.

Affected (this filing): 160

🌲Washington State AGlinked via same-victim cross-source · 100%

Filed May 20, 2025bd_7388d192de2195c0

Coinbase, Inc, a finance sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2025-05-11 and filed notice on 2025-05-20. 3,337 Washington residents were affected. 9 days elapsed between awareness and notification. 136 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 3,337

WA AG ≤30d

COINBASE, INC.

Litigation Timing

Sensitive data

Timeline