Coinbase Data Breach
Last Updated on May 16, 2025
At A Glance
- What's Going On?
- Attorneys are gathering people affected by the Coinbase data breach to take legal action via mass arbitration.
- What You Can Do
- If you got a letter or email about the data breach, fill out this quick form to sign up today. Though there are no guarantees, it's possible you could be owed hundreds of dollars.
- What Am I Signing Up For, Exactly?
- You are signing up for what’s known as mass arbitration, which is different from a class action and involves hundreds or thousands of consumers filing individual arbitration claims against the same company at the same time.
- Does This Cost Anything?
- It costs nothing to sign up, and the attorneys will only get paid if they win your claim.
Was your information exposed in the Coinbase data breach?
If so, join others taking action. It doesn't cost anything, and all you have to do is fill out a quick form using the link below.
Coinbase Data Breach: Legal Investigation
Attorneys working with ClassAction.org are gathering people to sign up for legal action in light of the Coinbase data breach.
If you got a notice about the breach, keep reading to learn more and find out how to sign up.
Coinbase Security Incident: What Happened?
On May 11, 2025, cryptocurrency exchange Coinbase reportedly received an email about a cybersecurity breach involving unauthorized access to certain customer data and internal documentation. An unidentified threat actor claimed they obtained this data by bribing support staff overseas. Coinbase confirmed the breach in a filing with the U.S. Securities and Exchange Commission and a May 15 blog post, stating that the incident affected less than 1% of its monthly transacting users.
The information compromised in the Coinbase data breach includes customer names, addresses, and emails; the last four digits of Social Security numbers; masked bank account numbers and bank account identifiers; images from government-issued IDs like driver's licenses and passports; account data; and limited corporate data. Coinbase stated that no passwords or private keys were exposed.
The attacker demanded a $20 million ransom, which Coinbase refused to pay. Instead, the company is cooperating with law enforcement and has offered a $20 million reward for information leading to the arrest of the responsible criminals. Coinbase has also stated that notices were sent to affected users.
What You Can Do
If your information was exposed in the Coinbase data breach, you may be able to take legal action via mass arbitration, which is different from a class action lawsuit.
Though nothing is guaranteed, those who sign up and take action could be entitled to hundreds of dollars under state consumer protection and privacy laws.
Got a notice about the Coinbase data breach? Fill out this quick, secure form to join others taking action.
Take Action
If you're at least 18 and received a notice regarding the Coinbase data breach, join others taking action by filling out this quick, secure form.
Published: May 16, 2025
Before commenting, please review our comment policy.
The information submitted on this page will be forwarded to Milberg Coleman Bryson Phillips Grossman, PLLC who has sponsored this investigation.
Featured In:
Who Is ClassAction.org?
ClassAction.org is a group of online professionals who are committed to exposing corporate wrongdoing and giving consumers the tools they need to fight back.
We've been reporting on the legal space for nearly a decade and have built relationships with class action and mass tort attorneys across the country.
