Bitcoin

Arthur

Security

Coinbase has been hit with a flood of lawsuits after it recently disclosed its user data was breached, with users accusing the crypto exchange of mishandling the incident.
At least six lawsuits were filed against Coinbase between May 15 and May 16, which all made various claims that the exchange failed to keep <a href="https://cointelegraph.com/news/crypto-security-hackers-cat-and-mouse-game-ledger-wallet-executive" rel="noopener noreferrer nofollow" target="_self">stringent security protocols</a> to protect user data and handled the data breach aftermath poorly.
In one of the lawsuits, filed in a New York federal court on May 16, plaintiff Paul Bender argued that Coinbase failed to protect the sensitive personal information of millions of users during the data breach.&nbsp;
<figure>
 <img alt="Coinbase, Cryptocurrencies, United States, Cryptocurrency Exchange, Cybercrime, Court, Crimes, Data" src="https://s3.cointelegraph.com/uploads/2025-05/0196e70a-51e1-74e7-9a19-4885f525e193" title="">
 <figcaption style="text-align: center;">
 Users are suing Coinbase, alleging the exchange failed to protect their sensitive data. Source: PACER
 </figcaption>
</figure>
Coinbase reported on May 15 that four days earlier it had been hit with a <a href="https://cointelegraph.com/news/cyber-criminals-steal-coinbase-customer-data-20-m-ransom" rel="noopener noreferrer nofollow" target="null">$20 million extortion attempt after cybercriminals</a> bribed several of its customer support agents to access internal systems and steal a limited amount of user account data.
The stolen data included names, addresses, phone numbers, emails, the last four digits of Social Security numbers, some bank account identifiers, driver’s licenses, passports and some account data, such as balance snapshots and transaction history.
Bender claimed that “Coinbase failed to implement and maintain reasonable security safeguards,” which exposed users to “serious and ongoing risks.”
The suit also claimed Coinbase’s response to the incident was “inadequate, fragmented, and delayed.”
“Users were not promptly or fully informed of the compromise, and Coinbase did not immediately take meaningful steps to mitigate further harm,&nbsp; provide identity protection services, or offer actionable guidance to affected individuals,” the complaint claimed.
The lawsuit claimed users could face “substantial, immediate, and ongoing threat of identity theft and financial fraud” and that the consequences of the breach could be long-term or “potentially permanent” because the compromised information can’t be recovered or made secure once exposed.
<h2 id="flurry-of-lawsuits-make-similar-allegations">Flurry of lawsuits make similar allegations&nbsp;</h2>
Two other lawsuits filed in a New York federal court made similar claims against Coinbase, while a fourth lawsuit added the allegation of unjust enrichment, arguing that Coinbase didn’t spend enough on data security measures.
All four complaints ask for damages and other measures to help protect the plaintiff’s sensitive data.
Meanwhile, a fifth lawsuit filed in a California federal court on May 15 made similar claims against Coinbase, but asked the court to order Coinbase to purge all sensitive data it holds about the plaintiffs and hire third-party security auditors to test its security systems, among other requests.
A Coinbase spokesperson did not comment on the lawsuits and instead pointed Cointelegraph to a blog post it shared regarding the data breaches.
Coinbase said it refused to pay the $20 million ransom and has flagged plans to reimburse users tricked into sending <a href="https://cointelegraph.com/learn/articles/what-is-a-phishing-attack-in-crypto-and-how-to-prevent-it" rel="noopener noreferrer nofollow" target="_self">crypto to phishing scammers</a> due to the data breach.
In a filing with the US Securities and Exchange Commission, <a href="https://cointelegraph.com/explained/crypto-exchanges-explained" rel="noopener noreferrer nofollow" target="_self">the exchange said</a> it expects reimbursement expenses ranging from $180 million to $400 million.
Related: <a href="https://cointelegraph.com/news/retired-artist-loses-2m-in-crypto-to-coinbase-impersonator" rel="noopener noreferrer nofollow" target="null">Retired artist loses $2M in crypto to Coinbase impersonator</a>
The exchange also <a href="https://cointelegraph.com/news/coinbase-social-engineering-agents-india-cso" rel="noopener noreferrer nofollow" target="null">reportedly fired a group of customer support agents</a> based in India following their alleged involvement in social engineering attacks on users.
Coinbase (COIN) shares <a href="https://cointelegraph.com/news/coinbase-drops-7-on-staff-breach-sec-probe-into-user-numbers" rel="noopener noreferrer nofollow" target="null">dipped 7% and dropped to $244</a> after it disclosed the data breach along with an ongoing SEC probe over misstated user numbers in 2021.
The stock has since staged a comeback, spiking 9% and hitting $266 by the closing bell on May 16, <a href="https://www.google.com/finance/quote/COIN:NASDAQ" rel="noopener noreferrer nofollow" target="null">according</a> to Google Finance.&nbsp;
<figure>
 <img alt="Coinbase, Cryptocurrencies, United States, Cryptocurrency Exchange, Cybercrime, Court, Crimes, Data" src="https://s3.cointelegraph.com/uploads/2025-05/0196e71c-2a2e-7e4d-9753-1c10245ed185" title="">
 <figcaption style="text-align: center;">
 Coinbase has climbed even higher following the data breach. Source: <a href="https://www.google.com/finance/quote/COIN:NASDAQ" rel="noopener noreferrer nofollow" target="null">Google Finance&nbsp;</a> 
 </figcaption>
</figure>
Magazine: <a href="https://cointelegraph.com/magazine/arthur-hayes-bitcoin-prediction-altcoin-rally-looms-coinbase-breach-hodlers-digest/" rel="noopener noreferrer nofollow" target="null">Arthur Hayes $1M Bitcoin tip, altcoins’ powerful rally’ looms: Hodler’s Digest, May 11 – 17</a>

Coinbase hit with wave of lawsuits over customer data breaches

Table of Contents

Cointelegraph

Other articles published on May 19, 2025

Join our free newsletter for daily crypto updates!