Coinbase Faces DoJ Investigations After Customer Data | Crypto Work Pro
The US Department of Justice (DoJ) has launched an investigation into the current security breach at crypto exchange Coinbase (Nasdaq: COIN). The breach concerned a leak of inner paperwork and information linked to a “small subset” of buyer accounts, which perpetrators accessed by bribing abroad help brokers of the company.
First reported by Bloomberg, citing “a person familiar with the matter”, Coinbase’s Chief Legal Officer, Paul Grewal, additionally confirmed the investigation is underway.
Paul Grewal, Chief Legal Officer, Coinbase, Source: LinkedIn
“We have notified and are working with the DOJ and other US and international law enforcement agencies, and welcome law enforcement’s pursuit of criminal charges against these bad actors,” Grewal mentioned.
The DoJ has not commented publicly on the investigation.
A Socially Engineered Attack
Coinbase disclosed the breach final week after the perpetrators contacted the company, demanding a $20 million ransom. The exchange refused to pay, as a substitute offering a $20 million reward for data resulting in the identification of these accountable.
The stolen information consists of names, addresses, emails, account balances, masked bank particulars, and partial Social Security numbers. Importantly, personal keys and passwords weren’t accessed, and Coinbase confirmed that Prime accounts had been unaffected.
The incident got here to gentle on 11 May when Coinbase acquired an e mail from an unidentified risk actor claiming entry to inner paperwork and the main points of sure buyer accounts. The exchange now expects the financial impression of the cyberattack to vary between $180 million and $400 million.
In April, Coinbase introduced modifications to its consumer settlement that added two clauses limiting class motion lawsuits and requiring lawsuits to be filed in New York. The modifications apply to disputes initiated after May 15.
On May 14, Coinbase disclosed a information breach. pic.twitter.com/ffMR2K4YRo
— Molly White (@molly0xFFF) May 20, 2025
Is Coinbase’s Security Now in Question?
Despite the current breach, Coinbase stays one of the few main crypto exchanges not beforehand impacted by a full-scale cyberattack.
Earlier this 12 months, Bybit suffered a document $1.5 billion crypto theft, allegedly carried out by North Korea’s Lazarus Group, which exploited vulnerabilities in its cold wallet infrastructure. In 2022, Binance, the world’s largest crypto exchange by quantity, additionally fell sufferer to a breach when attackers minted 2 million BNB tokens, value round $570 million on the time.
Meanwhile, Coinbase was added to the S&P 500 index yesterday, changing Discover Financial Services. The US-based exchange has additionally agreed to amass crypto choices platform Deribit for $2.9 billion and is reportedly bidding to amass stablecoin issuer Circle.
The US Department of Justice (DoJ) has launched an investigation into the current security breach at crypto exchange Coinbase (Nasdaq: COIN). The breach concerned a leak of inner paperwork and information linked to a “small subset” of buyer accounts, which perpetrators accessed by bribing abroad help brokers of the company.
First reported by Bloomberg, citing “a person familiar with the matter”, Coinbase’s Chief Legal Officer, Paul Grewal, additionally confirmed the investigation is underway.
Paul Grewal, Chief Legal Officer, Coinbase, Source: LinkedIn
“We have notified and are working with the DOJ and other US and international law enforcement agencies, and welcome law enforcement’s pursuit of criminal charges against these bad actors,” Grewal mentioned.
The DoJ has not commented publicly on the investigation.
A Socially Engineered Attack
Coinbase disclosed the breach final week after the perpetrators contacted the company, demanding a $20 million ransom. The exchange refused to pay, as a substitute offering a $20 million reward for data resulting in the identification of these accountable.
The stolen information consists of names, addresses, emails, account balances, masked bank particulars, and partial Social Security numbers. Importantly, personal keys and passwords weren’t accessed, and Coinbase confirmed that Prime accounts had been unaffected.
The incident got here to gentle on 11 May when Coinbase acquired an e mail from an unidentified risk actor claiming entry to inner paperwork and the main points of sure buyer accounts. The exchange now expects the financial impression of the cyberattack to vary between $180 million and $400 million.
In April, Coinbase introduced modifications to its consumer settlement that added two clauses limiting class motion lawsuits and requiring lawsuits to be filed in New York. The modifications apply to disputes initiated after May 15.
On May 14, Coinbase disclosed a information breach. pic.twitter.com/ffMR2K4YRo
— Molly White (@molly0xFFF) May 20, 2025
Is Coinbase’s Security Now in Question?
Despite the current breach, Coinbase stays one of the few main crypto exchanges not beforehand impacted by a full-scale cyberattack.
Earlier this 12 months, Bybit suffered a document $1.5 billion crypto theft, allegedly carried out by North Korea’s Lazarus Group, which exploited vulnerabilities in its cold wallet infrastructure. In 2022, Binance, the world’s largest crypto exchange by quantity, additionally fell sufferer to a breach when attackers minted 2 million BNB tokens, value round $570 million on the time.
Meanwhile, Coinbase was added to the S&P 500 index yesterday, changing Discover Financial Services. The US-based exchange has additionally agreed to amass crypto choices platform Deribit for $2.9 billion and is reportedly bidding to amass stablecoin issuer Circle.
Stay up to date with the newest developments in Crypto! Our web site is your go-to source for cutting-edge crypto information,
