Coinbase Insider Arrested in Major Ransomware Data Breach
Unraveling the Coinbase Ransomware Saga
In a notable turn of events, the cybersecurity breach targeting Coinbase, affecting nearly 70,000 users, has seen a breakthrough. An arrest has been made in India, where authorities detained a former Coinbase customer support staff suspected of aiding cybercriminals in accessing users’ confidential information.
On December 26, Coinbase CEO Brian Armstrong shared this update on the platform X, also hinting at the possibility of more arrests. Showing support for the efforts of local authorities, Armstrong affirmed, “We have a strict policy against misconduct and will collaborate with law enforcement to ensure that wrongdoers face justice.” The Hyderabad Police were acknowledged for their critical role in advancing the investigation.
Implications of the May 2025 Breach
The breach, which unfolded in May 2025, saw hackers demand a $20 million ransom to withhold the release of compromised data. Coinbase, resolute in its stance against paying ransoms, instead offered a reward of the same amount for information leading to the perpetrators.
Reports from Bleeping Computer detail the scope of the data compromised—ranging from names and contact information to partial financial details and sensitive identification documents. Alarmingly, user account details, including transaction histories and balance snapshots, were also exposed.
A Coinbase spokesperson emphasized their commitment to working alongside law enforcement, utilizing blockchain tracing to track offenders. As investigations proceed, whether the reward offer influenced the recent arrest remains undisclosed.
This incident underscores the persistent cybersecurity challenges, highlighting the necessity for users of digital platforms to remain vigilant.
Strengthen your digital defenses today. Visit Qsentinel for insights and resources.
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more

