Indian police arrest former Coinbase customer service employee, marking the first arrest in the internal data leak case

Indian police have arrested a former Coinbase customer service representative in Hyderabad, who is suspected of being involved in the insider data breach incident disclosed by Coinbase in May of this year. This is the first known arrest in the case, confirmed by Coinbase CEO Brian Armstrong.

The incident dates back to December 2024, and investigations show that cybercriminals obtained access to internal systems by bribing overseas customer service personnel, stealing sensitive information from 69,461 users, including names, addresses, phone numbers, emails, and government-issued identification documents. Coinbase stated that the attackers attempted to extort $20 million, which the company refused to pay, instead establishing a reward program of the same amount to track down and apprehend those involved.

In its Q2 financial report, Coinbase disclosed that the incident has resulted in $307 million in related expenses, covering user compensation, legal fees, and security upgrade costs. Additionally, Coinbase is currently facing a class-action lawsuit from shareholders, alleging that it failed to disclose the incident in a timely manner, misleading investors. Coinbase stated that it will continue to cooperate with international law enforcement agencies in the investigation, suggesting that further arrests may follow.