How many Coinbase users were exposed?

TLDR

About 69,461 Coinbase users customer data were exposed in a support-staff breach, roughly 1% of the user base per reports in late December (summary; detail).

1. Impact was about 1% of users; passwords and funds were not exposed (report).
2. Data types included names, addresses, phone numbers, emails, and IDs (report).
3. Law enforcement arrested a former support agent in India tied to the scheme (update).

Deep Dive

1. Scale

The breach affected approximately 69,461 users, equating to about 1% of Coinbases user base according to late-December coverage and community summaries (community summary; detail). Passwords and crypto funds were not reported as compromised; exposure centered on customer records used for social engineering (community summary above).

2. What Was Exposed

Reports state the records included names, addresses, phone numbers, emails, and government-issued IDs (detail). This kind of data is valuable for targeted scams and account-takeover attempts that rely on convincing communication rather than password compromise (community context).

3. Response And Costs

Coinbase refused a $20 million ransom, announced a $20 million bounty for tips, and coordinated with law enforcement; an arrest of a former support agent in Hyderabad was made (update). Remediation costs have been cited in the $180 million to $400 million range in coverage, reflecting compensation and security upgrades (community summary).

Conclusion

Approximately 69,461 users were affected (about 1%), with personal data exposed but not passwords or funds (summary; detail). The main risk is targeted phishing using verified personal details, while operational and legal responses are underway, including arrests and significant remediation spending (update).