In a recent cybersecurity incident, Coinbase, the largest cryptocurrency exchange in the United States, disclosed a data breach that affected less than 1% of its 9.7 million monthly users. Among those impacted is Roelof Botha, a prominent partner at venture capital firm Sequoia Capital. The breach involved cybercriminals bribing overseas customer support agents to access sensitive customer data, including government ID images, names, emails, and partial Social Security numbers.

The attackers demanded a $20 million ransom from Coinbase, threatening to leak the stolen data. Coinbase refused to pay and instead offered a $20 million reward for information leading to the attackers' conviction. The company estimates that the breach could cost between $180 million and $400 million in remediation and reimbursements.

This incident underscores the vulnerabilities in centralized cryptocurrency exchanges and raises concerns about the security measures in place to protect high-profile individuals and institutional investors. Coinbase has stated that no passwords or private keys were compromised and that customer funds remain safe. The company is cooperating with law enforcement and has implemented stronger security measures in response to the breach.

The breach also highlights the growing trend of social engineering attacks in the cryptocurrency sector. In March 2025 alone, Coinbase users lost over $46 million to such scams, emphasizing the need for enhanced security protocols and user education.

As the cryptocurrency industry continues to evolve, this incident serves as a stark reminder of the importance of robust security measures and the potential risks associated with digital asset management.