COINBASE DATA LEAK ATTACK TLDR:

→ criminals targeted overseas customer support agents

→ bribed a small group to copy user data from internal tools

→ breach impacted less than 1% of users

→ leaked data: names, addresses, phone numbers, masked SSNs & bank accounts, gov IDs, account info

→ no passwords or funds were compromised

→ coinbase refused to pay $20M ransom demand

→ instead offered $20M reward for info leading to the attackers arrest

→ affected users tricked into sending funds will be fully reimbursed