Coinbase Faces Setback Following Cyberattack
Paul Grewal, Coinbase’s Chief Legal Officer, stated that the Securities and Exchange Commission plans to halt litigation against the cryptocurrency exchange in its “final results.”
On Thursday, shares of Coinbase Global dropped over 7% after the exchange disclosed the potential financial fallout from cyberattacks, estimating losses could reach up to $400 million. The compromised data affects a “small subset of customers” and includes personal information like names, addresses, phone numbers, emails, and government ID images. However, the company’s filing clarified that passwords and private keys remained secure.
The platform, which manages assets worth over $328 billion, received a communication from an unidentified hacker on May 11. This individual claims to possess sensitive customer information and internal documents and is demanding a ransom of $20 million to keep the data private.
Coinbase reported that some of its contractors and employees outside the U.S. were involved in the breach, leading to their dismissal and referral to law enforcement authorities. The company noted that “cybercriminals have recruited a group of rogue support agents” to illegally access customer data and facilitate social engineering attacks.
Coinbase has not paid the hackers and plans to reimburse customers who fell victim. The estimated financial repercussions, including repair costs and customer refunds, range from $180 million to $400 million.
The exchange has made it clear that it is collaborating closely with law enforcement to impose strict penalties and will not comply with the $20 million ransom demand.
Additionally, Coinbase is offering a $20 million reward for information leading to the identification and prosecution of those responsible for the breach, while also enhancing security measures and launching a new support hub in the U.S.
This cyberattack revelation comes at a challenging time, with the U.S. Securities and Exchange Commission investigating whether Coinbase’s actions regarding users are in compliance with regulations.
Neither Coinbase nor the SEC responded promptly to inquiries for comment.
