Coinbase stayed silent for months on a customer data breach tied to a third-party contractor in India.
(Photo of Mariia Shalabaieva on Unsplash)
Posted June 3, 2025 at 10:43 am EST.
Coinbase was reportedly aware as early as January of a significant data breach at an outsourcing company that handled customer support for the cryptocurrency exchange, according to a report by Reuters.
An employee from the India-based firm, TaskUs, was caught taking photos of customer data on her work computer using her personal phone. Multiple sources, including former TaskUs employees, reportedly confirmed that Coinbase had been notified immediately after the incident was discovered in the Indian city of Indore.
This story is an excerpt from the Unchained Daily newsletter.
To get these updates in your email for free, subscribe here.
Coinbase disclosed the breach only last month in a filing to the U.S. Securities and Exchange Commission, and said in a blog post that it had refused to pay a $20 million ransom requested by cybercriminals in an extortion attempt.
More than 200 TaskUs employees were terminated in a mass layoff following the breach, which drew attention in Indian media.
Powered by WPeMatico