Archive · 3 Jun 2025
Coinbase Data Leak: Breach Tied to TaskUs Customer Data Theft
Coinbase, a company that lets people buy and sell digital money, had a security issue.
Employees at TaskUs, a company helping Coinbase, allegedly took photos of their computer screens and may have been selling customer information.
Coinbase knew about the potential data leak in January but did not publicly disclose it until later.
TaskUs fired two employees, and Coinbase has stopped working with the TaskUs personnel involved and other overseas agents, they said.
The incident, which could cost Coinbase up to $400 million, raises questions about when Coinbase realized the full extent of the breach and the actions taken.
Coinbase knew about a customer data leak at TaskUs, an outsourcing firm, as far back as January.
An India-based TaskUs employee was allegedly taking photos of their work computer with their phone.
The TaskUs employee and an accomplice were allegedly providing Coinbase customer data to hackers in exchange for bribes.
Coinbase previously attributed the breach to "support agents overseas".
Coinbase cut ties with involved TaskUs personnel and tightened controls.
- Who
- Coinbase and TaskUs employees
- What
- Customer data leak at outsourcing firm TaskUs connected to Coinbase breach
- When
- Incident occurred in January; Coinbase publicly disclosed in a May 14 filing
- Where
- Indore, India
- Why
- Coinbase customer data was allegedly being stolen and sold for bribes
- Companies Involved
- Coinbase, TaskUs
- Location of Data Leak
- Indore, India
- Alleged Cause of Breach
- Bribes for customer data
- Estimated Cost
- Up to $400 million
- Coinbase Action
- Cut ties with involved TaskUs personnel, tightened controls
- Date of Public Disclosure
- May 14
