Attorneys working with ClassAction.org are gathering people to sign up for legal action in light of the Coinbase data breach.
If you got a notice about the breach, keep reading to learn more and find out how to sign up.
On May 11, 2025, cryptocurrency exchangeCoinbase reportedly received an email about a cybersecurity breach involving unauthorized access to certain customer data and internal documentation. An unidentified threat actor claimed they obtained this data by bribing support staff overseas. Coinbase confirmed the breach in afiling with the U.S. Securities and Exchange Commission and a May 15 blog poststating that the incident affected less than 1% of its monthly transacting users.
The information compromised in the Coinbase data breachincludes customer names, addresses, and emails; the last four digits of Social Security numbers; masked bank account numbers and bank account identifiers; images from government-issued IDs like driver’s licenses and passports; account data; and limited corporate data. Coinbase stated thatno passwords or private keys were exposed.
The attacker demanded a $20 million ransom, which Coinbase refused to pay. Instead, the company is cooperating with law enforcement and has offered a $20 million reward for information leading to the arrest of the responsible criminals. Coinbase has also stated that notices were sent to affected users.
If your information was exposed in the Coinbase data breach, you may be able to take legal action via mass arbitrationwhich is different from a class action lawsuit.
Though nothing is guaranteed, those who sign up and take action could be entitled to hundreds of dollars under state consumer protection and privacy laws.
