Hackers gained unauthorized access to sensitive customer data at Coinbase as early as January, following the recent $400 million breach.
Attackers bribed foreign-based support staff to obtain names, birth dates, addresses, ID numbers, banking details, and more, which could be used for impersonation and unauthorized access to accounts.
Coinbase refuted claims of constant access since January but confirmed multiple bribery incidents involving support agents. Less than 1% of monthly users were affected by the breach, with no compromise of login credentials or wallets.
Coinbase is offering reimbursements to affected users, enhancing security measures, launching a $20 million bounty, and collaborating with authorities to pursue criminal charges against the perpetrators.