The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal

The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal reports that Coinbase disclosed Indian police have arrested a former employee from Coinbase’s vendor TaskUs who helped hand over customer records to hackers in exchange for bribes.

The individual, a customer support agent in India, had access to a wide range of sensitive data including customers’ names, addresses, phone numbers, email addresses, identity documents, account data, partially masked Social Security numbers and banking information. Investigators found that approximately 70,000 customers’ records were compromised after insiders inside the outsourcing firm aided the attackers, who then used social engineering campaigns to steal assets.

In May 2025 Coinbase described a data breach that began in December 2024 and noted that attackers sought a ransom of up to $20 million; Coinbase refused to pay and initiated an internal review. Initially two employees were identified, admitted selling user data, and were dismissed, but the inquiry showed the number of involved individuals exceeded those two. Coinbase’s CEO commented on X that “Another one down, and more to come,” with Indian authorities continuing to search for others implicated in the case.

The article also notes that outsourcing technical support staff is common for cost and English proficiency reasons, though such staff may not always adhere to legal or ethical standards.