New court filings in New York reveal that a data breach at Coinbase involved alleged complicity from employees at outsourcing firm TaskUs, with insiders reportedly selling sensitive customer information to criminal groups.
The amended class-action complaint, filed in the Southern District of New York, identifies TaskUs staff member Ashita Mishra as a central figure in a scheme that began in September 2024.
According to the filings, Mishra collected personal information from over 10,000 Coinbase accounts, including Social Security numbers, bank details, and transaction logs.
She reportedly photographed customer data on her phone, capturing up to 200 records per day, and recruited colleagues in a “hub-and-spoke” operation to pass the information to hackers.
Participants were often unaware of the full network, allowing the scheme to continue even if one insider was exposed.
The hackers, linked to a loose collective called ‘the Comm,’ allegedly used the stolen data to impersonate Coinbase staff and trick customers into revealing their crypto holdings.
Investigators estimate that TaskUs insiders earned at least $500,000 in bribes, with Mishra receiving $200 per data record.
The complaint claims that TaskUs dismissed around 300 employees in January 2025, including human resources personnel investigating the breach.
Plaintiffs say the company attempted to silence insiders who raised concerns and downplayed the incident to regulators.
The February Form 10-K filed by TaskUs reportedly omitted any reference to a material breach, even as the company pursued a $1.6 billion buyout deal with Blackstone.
Coinbase has consistently distanced itself from TaskUs, immediately notifying regulators and affected customers, reimbursing impacted accounts, tightening internal security, and ending its partnership with the vendor.
A Coinbase spokesperson stated the exchange refused to pay the criminals and instead established a $20 million reward for information leading to arrests and convictions.
Coinbase has characterised the actions of TaskUs staff as systemic, rather than isolated incidents, citing violations of Section 5 of the FTC Act on unfair practices.
Regulators are expected to examine whether adequate safeguarding measures were in place, such as encryption or multi-factor authentication, and assess the potential exposure of customers to identity theft or financial loss.
The case highlights the vulnerabilities of outsourcing critical customer services in the crypto industry, where exchanges manage both personal data and financial assets.
Analysts warn that, if proven, the allegations could influence how exchanges oversee offshore operations.
Previously, Binance and Kraken have faced similar social engineering threats, with hackers attempting to bribe employees to access sensitive information.
Binance reportedly used AI-driven monitoring to halt suspicious activity, while Kraken denied involvement, noting it had warned Coinbase about potential risks before the breach.
TaskUs, headquartered in Texas, has not responded to the latest allegations but maintains it has strengthened security protocols.
The mounting legal and regulatory scrutiny, combined with public attention on systemic failures, could have lasting effects on the company’s credibility as a trusted outsourcing provider.
The filings estimate that the breach resulted in losses between $180 million and $400 million and affected at least 69,000 Coinbase customers, emphasising the scale and severity of the insider-driven attack.
Circle dengan tegas menyangkal tuduhan pembiayaan ilegal dan hubungannya dengan Justin Sun, membantah klaim dari Campaign for Accountability di tengah kekhawatiran mata uang kripto yang lebih luas.
Hui XinRollbit, yang menggabungkan kasino online dan pertukaran kripto, mencapai kapitalisasi pasar sebesar $505 juta dan pendapatan biaya bulanan sebesar $41 juta yang mengesankan, dengan token RLB yang mengalami pengembalian 70x lipat tahun ini.
YouQuanAn unnamed developer, identified only as Leonidas, has publicly accused OCEAN of engaging in the censorship of transactions related to Bitcoin Ordinals.
BrianSebuah kasus yang melibatkan barang koleksi digital muncul ke permukaan, menyoroti skema penggalangan dana yang menipu. Para penawar yang tidak sadar, yang terpikat pada investasi impulsif, menemukan diri mereka tanpa disadari menjadi peserta dalam skema piramida. Investigasi mengungkapkan bahwa platform yang dimaksud telah menyerap lebih dari 1,34 juta yuan dari ribuan pengguna, yang mengakibatkan total kerugian lebih dari 410.000 yuan bagi para korban.
JoySetelah kematian Henry Kissinger, pasar kripto mengalami lonjakan koin meme bertema Kissinger, yang menyoroti sifat spekulatif dari budaya koin meme.
YouQuanSejak awal, BITO telah mempertahankan volume perdagangan harian rata-rata sebesar $160 juta, menempatkannya di antara 5% teratas dari semua ETF AS.
BrianVeVe merilis koleksi komik digital baru yang menakjubkan berjudul "Star Wars: Return of the Jedi #1" pada tanggal 15 Desember pukul 8 pagi waktu setempat. Koleksi ini merayakan ulang tahun ke-40 film ikonik ini dan menawarkan kepada para penggemar sebuah cara unik untuk memiliki dan merasakan sepotong sejarah Star Wars.
JoyOrang dalam yang mengetahui masalah ini mengungkapkan bahwa langkah Kucoin untuk mengakuisisi Ku.com adalah upaya untuk meningkatkan posisinya di sektor pertukaran mata uang kripto.
BrianLazarus Group, sebuah entitas peretasan Korea Utara, telah meningkatkan kekhawatiran keamanan siber global dengan mengumpulkan $3 miliar melalui pencurian mata uang kripto yang canggih.
Hui XinFBI dan Badan Intelijen dan Investigasi Keuangan Belanda telah menyita situs web dari sebuah mixer kripto bernama Sinbad, yang diduga digunakan oleh para peretas dan penjahat siber Korea Utara untuk mencuci dana curian.
Joy