Coinbase Global Inc (NASDAQ:COIN) has disclosed a major security breach involving the personal data of high-value customers, after hackers bribed outsourced support staff to access internal systems.
The attackers demanded a $20 million ransom in exchange for deleting the stolen information.
It follows a spate of hacks, including the breaches at M&S and Co-Op here in the UK and MGM Resorts International and Caesars Entertainment casinos in the States.
The latest incident, which could cost the company up to $400 million, involved names, government ID numbers and banking details, though Coinbase said passwords and private keys were not exposed.
Fewer than 1% of users were affected, and the firm has pledged to fully reimburse any financial losses.