Coinbase ex-employee arrested in India over $20M customer data breach

Indian police have arrested a former Coinbase customer service agent in Hyderabad in connection with a security breach where hackers bribed employees to access sensitive customer information and demanded $20 million in ransom.

Coinbase CEO Brian Armstrong announced the arrest on X, thanking the Hyderabad Police for their efforts.

“We have zero tolerance for bad behavior and will continue to work with law enforcement to bring bad actors to justice,” Armstrong said.

The breach represents one of the most high-profile insider threat cases on a crypto trading platform. Hackers successfully bribed customer service representatives to gain unauthorized access to customer data, then demanded $20 million from the exchange.

Arrest follows months-long investigation

The arrest comes months after the security incident first occurred. Armstrong’s announcement on X highlighted the company’s collaboration with law enforcement agencies to pursue those responsible for the breach.

The Coinbase CEO also noted a recent collaboration between the company and the Brooklyn District Attorney’s Office, where prosecutors charged a Brooklyn man for running an impersonation scheme targeting Coinbase customers. However, that case appears separate from the India-based insider breach.

Financial impact on Coinbase

The security breach has had significant financial consequences for the cryptocurrency exchange. Coinbase estimates that remediation costs could reach up to $400 million to address the security failures and implement enhanced protective measures.

Market reaction was swift. Shares of Coinbase fell by approximately 1.2% to $236.79 on Friday following news of the breach and arrest. The stock has declined roughly 4.6% year-to-date, reflecting ongoing investor concerns about security vulnerabilities at major cryptocurrency platforms.

The company has emphasized its commitment to working with global law enforcement to pursue criminal charges against both insider threats and external bad actors who target its platform and customers.