Coinbase said cyber crooks stole customer information and demanded $20 million ransom payment

Advertisement

Advertise with us

Coinbase, the largest cryptocurrency exchange based in the U.S., said Thursday that criminals had improperly obtained personal data on the exchange’s customers for use in crypto-stealing scams and were demanding a $20 million payment not to publicly release the info.

Read this article for free:


or

Already have an account? Log in here »

To continue reading, please subscribe:

Subscribe and receive a limited-edition Free Press branded hat or tote.

Digital Subscription

One year of digital access for only $205*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*First annual payment billed as $205.00 + GST for one year. This annual subscription will automatically renew at $233.00 + GST every 52 weeks (10% off the regular annual price of $259.35). Offer available to new and qualified returning subscribers only. Cancel any time.

To continue reading, please subscribe:

Add Free Press access to your Brandon Sun subscription for only an additional

$1 for the first 4 weeks*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles
Start now

*Your next Brandon Sun subscription payment will increase by $1.00 and you will be charged $17.95 plus GST for four weeks. After four weeks, your payment will increase to $24.95 plus GST every four weeks.

Hey there, time traveller!
This article was published 15/05/2025 (498 days ago), so information in it may no longer be current.

Coinbase, the largest cryptocurrency exchange based in the U.S., said Thursday that criminals had improperly obtained personal data on the exchange’s customers for use in crypto-stealing scams and were demanding a $20 million payment not to publicly release the info.

Coinbase CEO Brian Armstrong said in a social media post that criminals had bribed some of the company’s customer service agents who live outside the U.S. to hand over personal data on customers, like names, dates of birth and partial social security numbers.

“(The stolen data) allows them to conduct social engineering attacks where they can call our customers impersonating Coinbase customer support and try to trick them into sending their funds to the attackers,” Armstrong said.

FILE - The Coinbase logo covers the Nasdaq MarketSite in New York's Times Square, April 14, 2021. (AP Photo/Richard Drew, File)
FILE - The Coinbase logo covers the Nasdaq MarketSite in New York's Times Square, April 14, 2021. (AP Photo/Richard Drew, File)

Social engineering is a popular hacking strategy, as humans tend to be the weakest link in any network. Many large companies have suffered hacks and data breaches as a result of such scams in recent years.

Coinbase did not specify how many customers had their data stolen or fell prey to social engineering scams. But the company did pledge to reimburse any who did.

Coinbase shares fell 6% in trading around midday. The shares are still up about 22% this month due to gains in bitcoin and other cryptocurrencies.

In a filing with the Securities and Exchange Commission, Coinbase estimated that it would have to spend between $180 million to $400 million “relating to remediation costs and voluntary customer reimbursements relating to this incident.”

The SEC filing said that the company had, “in previous months,” detected some of its customer service agents “accessing data without business need.” Those employees had been fired, and the company said it stepped up its fraud prevention efforts.

Coinbase said it received an email from the attackers on Sunday demanding a ransom of $20 million worth of bitcoin not to publicly release the customer data they had stolen.

Armstrong said the company was refusing to pay the ransom and would instead offer a $20 million bounty for anyone who provided information that led to the attackers’ arrest.

“For these would-be extortionists or anyone seeking to harm Coinbase customers, know that we will prosecute you and bring you to justice,” Armstrong said. “And know you have my answer.”

Report Error Submit a Tip

More Stories

Failure to exploit NDP weaknesses leaves PCs in tailspin

Tom Brodbeck 5 minute read Preview

Failure to exploit NDP weaknesses leaves PCs in tailspin

Tom Brodbeck 5 minute read Yesterday at 3:59 PM CDT

Manitoba’s Progressive Conservative party is getting slaughtered.

Read
Yesterday at 3:59 PM CDT

Restaurants ‘under pressure’

Gabrielle Piché 5 minute read Preview

Restaurants ‘under pressure’

Gabrielle Piché 5 minute read 5:27 PM CDT

Happy hour outings are on Jackie Piggott’s calendar — but even those are fewer.

She and her husband might visit a restaurant once a month. It’s a change over the past year: earlier, they may go twice, thrice or weekly.

“It’s something that we’ve talked about, my husband and myself, just because the pricing is so expensive,” Piggott said, stopping during a grocery run in St. Vital. “It’s also better for our health.”

She’s in the majority: a new Restaurants Canada report found 80 per cent of Canadians are eating out less frequently because of higher living costs, up from 75 per cent in 2025.

Read
5:27 PM CDT

Shoal Lake Lodge a manifestation of reconciliation in action

Patrick Nolan 7 minute read Preview

Shoal Lake Lodge a manifestation of reconciliation in action

Patrick Nolan 7 minute read 5:17 PM CDT

Before proceeding with this story, it is so very important to acknowledge that Shoal Lake (Treaty 3 Territory) is the source of Winnipeg’s drinking water.

Ironically, for all the years that we have enjoyed the gift of some of the best and safest water in the world, those who reside on the shores of its source have suffered without. Years’ long boil water advisories caused insecurity of not having a safe source of water for children and families. That this was only very recently addressed and solved in a just and hopefully lasting way is commentary for another time and in another place.

Today, in the interest in encouraging positive and meaningful conversations in these difficult and divisive time — and in the spirit of looking at the energy of what lies ahead rather than looking back at what was — there is hope. And possibility.

Shoal Lake is situated approximately two hours east of Winnipeg, sitting astride the Manitoba-Ontario border. Two different roads access separate First Nation communities that are on the lake. The first being Freedom Road, completed in June 2018, which intersects the Trans-Canada Highway just west of Falcon Lake, and now allows community members of Shoal Lake FN 40 vehicle access. Second is Ontario Highway 673, across the provincial border, which allows road access to Iskatewizaagegan (Shoal Lake) No. 39.

Read
5:17 PM CDT

Several mayors bow out of fall’s municipal elections

Connor McDowell 3 minute read 2:01 AM CDT

BRANDON — A number of mayors have decided not to run for re-election in western Manitoba municipalities.

Tenants slam Alta.-based landlord, protest rent increases

Scott Billeck 6 minute read Preview

Tenants slam Alta.-based landlord, protest rent increases

Scott Billeck 6 minute read 5:11 PM CDT

Charlie Medd wasn’t ready for another adventure last October, when she moved out of the Wolseley Avenue apartment she had called home for 15 years.

Medd said life at Lincoln Apartments began to change after Wingspan Properties, an Alberta-based landlord, bought the building, made minor cosmetic changes and increased rent. She felt the changes were intended to push renters — many of them on fixed incomes — out the door.

“At some point, I got scared. I’d been there 15 years,” Medd said about the threat of rent increases. “I’d just painted my whole apartment. But when I heard that there’s going to be that many people homeless, I thought, ‘I’m too old for another adventure.’

“It felt like you were getting a nudge out the door. Like, ‘Yeah, we’re going to be doing this, and your rent is going to go up every year.’”

Read
5:11 PM CDT

No more Jets 1.0 or 2.0: League announces all eras of Winnipeg’s club to be merged

Ken Wiebe 6 minute read Preview

No more Jets 1.0 or 2.0: League announces all eras of Winnipeg’s club to be merged

Ken Wiebe 6 minute read Updated: Yesterday at 5:47 PM CDT

Mark Scheifele’s goal was always to chase down his mentor and former Barrie Colts head coach Dale Hawerchuk, no matter what the official record book said.

So when the NHL and the Winnipeg Jets announced on Thursday morning that they were consolidating the franchise history to include the 1.0 and 2.0 eras (including the Atlanta Thrashers chapter of the club), Scheifele was among those to give the move two thumbs up.

“Yeah, it clarifies it for you guys more, not as much (for) me,” said Scheifele. “It’s really cool to bring in the old Jets records, and especially Dale. Chasing him down was always on my mind. So, it’s cool to do it actually in the record books.”

Scheifele remains the franchise leader in games played (961) and he’s likely to eclipse Hawerchuk in goals (Scheifele has 372 to Hawerchuk’s 379) and points (Scheifele has 907 to Hawerchuk’s 929) this season. He now has Thomas Steen’s 553 assists in his sights after amassing 535 heading into 2026-27.

Read
Updated: Yesterday at 5:47 PM CDT