Coinbase data breach
Was I affected?
Coinbase confirmed a breach affecting about 69,461 people, exposing names, addresses, phone numbers and email addresses. You were affected if Coinbase emailed you about this incident in May 2025.
| Announced | May 15, 2025 |
|---|---|
| When it happened | December 26, 2024 - May 2025 |
| People affected | 69,461 |
| Data exposed | Names, Addresses, Phone numbers, Email addresses, Social Security numbers, Bank or financial details, Passport numbers and Driver's license numbers |
| Through a vendor | Overseas customer support contractor (unnamed) |
| Status | Confirmed by the company or a regulator filing |
What happened
Coinbase disclosed in May 2025 that criminals bribed a small group of overseas support agents to copy customer data, then demanded $20 million, which Coinbase refused. Its Maine filing listed 69,461 affected users; data included names, contact details, the last four digits of SSNs, masked bank account numbers, government ID images and account balances and history. Coinbase said passwords, keys and funds were not accessed and pledged to reimburse customers tricked into sending crypto.
What should I do?
- Coinbase will never ask you to move funds to a 'safe' wallet; hang up on anyone who does and only use the Coinbase app.
- Turn on a passkey or hardware security key and an address allowlist for withdrawals in your Coinbase account.
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
- Ask your passport or driver's license issuer about flagging the document if you see misuse of your ID.
Check the other services you use →
Sources
- Coinbase says its data breach affects at least 69,000 customers · TechCrunch (news)
- Coinbase says rogue contractor data breach affects 69,461 users · SecurityWeek (news)