The largest cryptocurrency exchange in the U.S., Coinbase, estimates that a recent cyber attack compromising the account data of a “small subset” of customers could cost between $180 million to $400 million. This figure doesn’t include the $20 million ransom that hackers are demanding, a payment Coinbase has decided against.
While Coinbase handles a significant volume of cryptocurrency transactions in the country, the stolen data—like names, addresses, and emails—does not include any login credentials or passwords. Nonetheless, the company is ensuring that it refunds customers tricked into sending funds to the attacker.
The attackers reportedly employed several contractors and non-U.S. employees to dig into the company’s internal systems for information. In response, Coinbase quickly terminated the employee involved.
Coinbase is also refusing to comply with the ransom demand, opting instead to work with law enforcement and offering a $20 million reward for information leading to the attacker’s capture.
In a blog post, the company stated, “Instead of funding criminal activities, we will investigate the case, increase control, and provide refunds to customers affected by this incident.”
On May 11, Coinbase received a threatening email from an unidentified source, claiming to possess information about certain customer accounts and internal documentation. This threat surfaced just days before Coinbase is set to be included in the Benchmark S&P 500 Index, representing a significant milestone for the cryptocurrency sector.
Security issues persist within the crypto industry; for example, in February, BYBIT, the second-largest cryptocurrency exchange by trading volume, reported that attackers stole approximately $1.5 billion in digital assets.
In total, cyber attacks on crypto platforms led to losses of $2.2 billion in 2024, according to blockchain analytics firm Chain Orisys, marking the fourth consecutive year that hacks have surpassed $1 billion.
