Coinbase says customers’ personal information stolen in data breach

Crypto elephantine Coinbase has confirmed its systems person been breached and lawsuit data, including government-issued individuality documents, were stolen.

In a legally required filing with U.S. regulators, Coinbase said a hacker this week told the institution that they had obtained accusation astir lawsuit accounts, and demanded wealth from the institution successful speech for not publishing the stolen data.

Coinbase said the hacker “obtained this accusation by paying aggregate contractors oregon employees moving successful enactment roles extracurricular the United States to cod accusation from interior Coinbase systems to which they had entree successful bid to execute their occupation responsibilities.” The enactment unit are nary longer employed, the institution said.

The filing said Coinbase’s systems detected the malicious enactment “in the erstwhile months,” and that it has “warned customers whose accusation was perchance accessed successful bid to forestall misuse of immoderate compromised information.”

Coinbase said it has not paid the hacker’s unspecified ransom.

The institution said the hacker stole lawsuit names, postal and email addresses, telephone numbers, and the past four-digits of users’ Social Security numbers. The hacker besides took masked slope relationship numbers and immoderate banking identifiers, arsenic good arsenic customers’ government-issued individuality documents, specified arsenic driver’s licenses and passports. The stolen information besides includes relationship equilibrium information and transaction histories. 

The institution said immoderate firm data, specified arsenic interior documentation, was besides stolen during the breach. 

Coinbase said it expects to incur costs of astir $180 cardinal to $400 cardinal relating to incidental remediation and lawsuit reimbursements.

A spokesperson for Coinbase did not instantly respond to TechCrunch’s petition for comment. 

More soon…