Coinbase hack suspect stored data of 10 000 customers
New class action lawsuit reveals details of the largest hack in Coinbase’s history and points to the role of an employee of Indian outsourcer TaskUs
17.09.2025 - 09:05
306
2 min
0
Key points:
- Data from more than 10 000 Coinbase customers was found on the suspect’s phone.
- The estimated damage from the hack is $400 million.
- According to Coinbase, more than 69 000 users were affected.
In May 2025, Coinbase reported a major data leak organized by employees of the outsourcing company TaskUs in India. Hackers stole information from thousands of customers and used it to commit identity theft and fraud. A new lawsuit against TaskUs reveals details about the role of one of the suspects, Ashita Mishra.
How the attackers operated
According to a complaint filed by the law firm Greenbaum Olbrantz, Mishra began stealing Coinbase customer data in September 2024. More than 10 000 records containing social security numbers and bank details were found on her phone. She sold photos of accounts for $200 per image, sometimes taking up to 200 photos a day.
The lawsuit states that Mishra and her accomplices involved other TaskUs employees in the conspiracy. According to former employees, even managers may have been involved in the thefts.
“Our amended complaint provides an unprecedented accounting of how this data breach unfolded, and we will continue to work towards holding all responsible parties accountable,” said Carter Greenbaum, cofounder of Greenbaum Olbrantz.
Coinbase and TaskUs’ response
Coinbase confirmed the leak and said it had compensated affected customers, tightened controls over suppliers, and terminated its relationship with TaskUs. The exchange also announced a $20 million reward for information leading to the arrest of those involved in the scheme.
TaskUs fired hundreds of employees and HR specialists who attempted to investigate the incident. The lawsuit refers to this as “systematic concealment.” The company has not yet issued an official comment.
Coinbase is trying to move the lawsuits to arbitration to minimize damage and publicity. Lawyers, however, are insisting on a full trial against TaskUs.
Useful material?
Telegram 
Twitter Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026
Cryptocurrency rates
-
Bitcoin
$60 105
BTC
-0.47%
-
Ethereum
$2 551.16
ETH
+3.56%
-
BNB Smart Chain
$579.4
BSC
+1.23%
-
Ripple
$1.05
XRP
-0.83%
-
TRON
$0.160134
TRX
-1.59%
-
Dogecoin
$0.073548
DOGE
-2.31%
-
Zcash
$387.29
ZEC
-4.85%
-
Stellar XLM
$0.171388
XLM
-1.74%
-
Cardano
$0.144745
ADA
-1.57%
-
Polkadot
$3.32
DOT
+5.27%