The tweet was deleted by the author.
But we saved everything 🙂.
Crypto exchange Coinbase has confirmed the arrest in India of a former customer support employee through whom hackers gained access to client data in May 2025 and attempted to extort $20 million from the company.
The arrest is linked to the data breach revealed in May, when Coinbase reported that attackers had paid contractors or employees outside the United States to steal customer information and later tried to extort $20 million. At the time, Coinbase estimated the cost of remediation at $400 million, making it one of the most expensive security incidents in the crypto industry to date.
Now Coinbase CEO Brian Armstrong has confirmed at least two arrests of support staff outsourced to an Indian company and hinted that more arrests are expected.
“We have zero tolerance for misconduct and will continue to work with law enforcement to hold bad actors accountable. Thanks to Hyderabad police in India, a former Coinbase support employee has been arrested. Another has been detained, and many more arrests are coming,” Armstrong said.
Meanwhile, the consequences of one of the most notable hacks in the crypto industry have taken on an international dimension. In a related incident, a Brooklyn resident who allegedly tried to exploit the compromised data in a “long-running identity fraud scheme targeting Coinbase customers” was also arrested.
Investors do not appear to be overly alarmed: Coinbase stock fell just 1.2% in 24 hours to $237. However, the nature of the event speaks for itself: as crypto companies push toward mass adoption, operational security—and oversight of third-party contractors—remains just as critical as code. And it is not something that can be economized on.
As we wrote, Coinbase returns to India, plans full fiat launch in 2026