Coinbase says cybercriminals bribed a small group of overseas support contractors to pull customer data from internal tools, hitting “less than 1 %” of its monthly active users. The exchange said the breach did not expose any passwords, private keys, or funds, and that Coinbase Prime accounts remained untouched. Coinbase Attackers Demanded $20 Million Ransom The attackers demanded a $20 million payment to keep the incident quiet. However, Coinbase said in a blog post that it refused and redirected the sum into a $20 million reward fund for information leading to their arrest and conviction
source: https://beincrypto.com/coinbase-insider-breach-20-million-bounty/