Coinbase: bribed support contractors leak data of 69,461 customers, $20M ransom refused
Teaser from the source
Criminals bribed overseas support staff to pull customer data (names, contact details, partial financial data, ID images, balances and transactions), then demanded $20M. Coinbase refused, offered a matching bounty, and estimated $180M to $400M in costs. No passwords, private keys or funds were accessed directly.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on Coinbase
Other advisories
- MediumCVE-2026-103311Coinbase Commerce Payment Gateway for WooCommerce: Sicherheitslücke
- MediumCVE-2026-103311Coinbase Commerce Payment Gateway for WooCommerce: Sicherheitslücke
- Not ratedosv:CVE-2026-109366Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height
- Not ratedosv:CVE-2026-104422Zebra before 6.3.0 Block Sync Denial of Service via Coinbase scriptSig Rewrite
- Not ratedosv:MAL-2026-5499Malicious code in coinbase-wallet-utils (npm)
- MediumCVE-2026-6709Das Coinbase Commerce for Contact Form 7 Plugin für WordPress ist in Versionen bis einschließlich 1.
- MediumCVE-2026-6709Das WordPress-Plugin Coinbase Commerce für Contact Form 7 ist anfällig für Fehlende Autorisierung in Versionen bis einschließlich 1.
- MediumCVE-2026-6709The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2. This is due to a …
Source: https://pwn.watch/i/coinbase-bribed-support-agents-breach-may-2025
ID