News Summary

Coinbase, a leading cryptocurrency exchange, has revealed a significant internal security breach involving the bribery of some of its support agents by cyber criminals. These criminals obtained sensitive customer data, including names, addresses, emails, phone numbers, and images of government IDs, by bribing employees. They then used this information for social engineering attacks, tricking some Coinbase users into transferring money and demanded a $20 million ransom from the company to prevent the public disclosure of the stolen data. Coinbase has not paid the ransom and is working with law enforcement to prosecute the attackers. The company is also offering a $20 million reward for information leading to the arrest and conviction of the remaining criminals. Despite the breach, Coinbase maintains that user login credentials, two-factor authentication codes, and private keys remain secure. The financial impact of the incident is estimated to be between $180 million and $400 million.