Coinbase faced a threat from outside attackers attempting to extort $20 million in Bitcoin, resulting in personal account details being leaked by paid off support agents.
Less than 1% of Coinbase's monthly active traders had some of their data exposed, as a handful of customer-support contractors accessed internal tools to extract names, email addresses, and limited transaction records.
Coinbase refused to pay the hackers' demand and instead announced a $20 million bounty to track down those responsible, and plans to set aside $180 million to $400 million for customer reimbursements for phishing scam losses.
Phishing losses for Coinbase users are rising, estimated at over $300 million annually, prompting Coinbase to strengthen defenses by improving data controls, relocating support work, enhancing staff checks, and upgrading fraud-monitoring tools.