.@coinbase should pay for identity theft protection services for all members whose personal data was leaked.