Coinbase breach tied to bribed TaskUs support agents in India

A recently disclosed data breach at Coinbase has been linked to India-based customer support representatives from outsourcing firm TaskUs, who threat actors bribed to steal data from the crypto exchange. According to Reuters, who spoke to numerous TaskUs employees, the data breach was first discovered in January after a TaskUs employee was caught capturing photos of her computer screen using a personal device. Reportedly, the incident was witnessed by multiple TaskUs employees, and during the subsequent investigations, two admitted they were funneling sensitive Coinbase user data to external hackers in exchange for bribes. Upon confirming the data theft in January 2025, TaskUs informed Coinbase accordingly, four months before the breach was publicly disclosed. Coinbase first disclosed the incident on May 15, stating that rogue support agents stole customer data, including names, emails, partial financial information and SSN, transaction history, and ID document scans. "Cyber crimi ... Read full article.