Crypto giant Coinbase has confirmed its systems have been breached and customer data, including government-issued identity documents, were stolen.

Instead of paying the $20 million ransom, Coinbase offered the same amount of money for information leading to the attackers.

On May 11, 2025 the company received ransom demands from an unknown threat actor who claimed to have information about Coinbase customer accounts and internal Coinbase documents including customer service and account management systems materials.