Coinbase (COIN.O), forecast a hit of $180 million to $400 million from a cyberattack that breached account data of a \u201csmall subset\u201d of its customers, the crypto exchange said in a regulatory filing on Thursday. The company received an email from an unknown threat actor on May 11, claiming to have information about certain customer accounts as well as internal documents. While some data \u2014 including names, addresses and emails \u2014 was stolen, the hackers did not get access to login credentials or passwords, Coinbase said. It would, however, reimburse customers who were tricked into sending funds to the attackers. Hackers had paid multiple contractors and employees working in support roles outside the U.S. to collect information. The company had fired those involved, it said. Separately, the U.S. Securities and Exchange Commission had begun scrutinizing whether Coinbase had misstated its user figures, two sources familiar with the matter told Reuters. The agency had also been interested in whether any inaccurate user data could indicate the company had inadequate know-your-customer compliance that is required of firms registered with the SEC, the sources said. A Coinbase spokesperson denied the SEC was probing the company\u2019s compliance with know-your-customer and Bank Secrecy Act rules. Another source familiar with the matter said that the SEC did not directly ask questions about such compliance and that it would not be a relevant topic since the SEC dropped a separate case against Coinbase alleging the firm failed to register with the SEC. The inquiry into Coinbase\u2019s \u201cverified user\u201d metric had continued even after the SEC abandoned its other lawsuit, the source said. The New York Times first reported the investigation into user data from past disclosures. Coinbase shares extended losses after the report and were last down 6.5%.\u201cThis is a hold-over investigation from the prior administration about a metric we stopped reporting two and a half years ago, which was fully disclosed to the public,\u201d Coinbase\u2019s chief legal officer, Paul Grewal, said. \u201cWhile we strongly believe this investigation should not continue, we remain committed to working with the SEC to bring this matter to a close.\u201d The SEC declined to comment. CRACKS IN CRYPTO: The latest developments come days before the company is set to join the benchmark S&P 500 index (.SPX), opens new tab, casting a shadow over what was expected to be a landmark moment for the crypto industry. Security remains a challenge for the crypto industry despite its growing mainstream acceptance. In February, Bybit disclosed a hack in which around $1.5 billion of digital tokens were stolen \u2014 widely dubbed the biggest crypto heist of all time. \u201cThe cyberattack may push the industry to adopt stricter employee vetting and introduce some reputational risks,\u201d said Bo Pei, analyst at U.S. Tiger Securities. Funds stolen by hacking crypto platforms totaled $2.2 billion in 2024, according to a report from Chainalysis. \u201cAs our nascent industry grows rapidly, it draws the eye of bad actors, who are becoming increasingly sophisticated in the scope of their attacks,\u201d said Nick Jones, founder of crypto firm Zumo. The firm now also faces a lawsuit, filed in the Southern District of New York, alleging the world\u2019s largest crypto exchange failed to secure and safeguard personally identifiable information of millions of former and current customers, the filing showed. Coinbase has refused to pay a ransom demand of $20 million from the attackers and is working with law enforcement agencies. It has instead established a $20 million reward for information on the hackers. The company is also opening a new support hub in the U.S. and taking other measures to prevent such cyberattacks, it said.<\/p>\n","protected":false},"excerpt":{"rendered":"
Coinbase (COIN.O), forecast a hit of $180 million to $400 million from a cyberattack that breached account data of a \u201csmall subset\u201d of its customers,…<\/p>\n","protected":false},"author":1,"featured_media":24567,"comment_status":"registered_only","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[14],"tags":[],"class_list":["post-24566","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"aioseo_notices":[],"jetpack_publicize_connections":[],"_links":{"self":[{"href":"https:\/\/www.diplomacypakistan.com\/index.php?rest_route=\/wp\/v2\/posts\/24566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.diplomacypakistan.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.diplomacypakistan.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.diplomacypakistan.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.diplomacypakistan.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=24566"}],"version-history":[{"count":0,"href":"https:\/\/www.diplomacypakistan.com\/index.php?rest_route=\/wp\/v2\/posts\/24566\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.diplomacypakistan.com\/index.php?rest_route=\/wp\/v2\/media\/24567"}],"wp:attachment":[{"href":"https:\/\/www.diplomacypakistan.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.diplomacypakistan.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.diplomacypakistan.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}