At CaseyGerry, our legal team is actively investigating the recent Coinbase data breach, which may have exposed sensitive personal information of users, including many in California. If you were affected by the Coinbase data breach in California, you may have legal options. We are reviewing potential claims on behalf of affected individuals and are here to help guide you through your options.
Our investigation is led by attorney Gayle Blatt, head of CaseyGerry’s complex litigation practice. With decades of experience handling high-profile data breach and privacy cases, Gayle has earned recognition as one of California’s Top Plaintiff Lawyers and has helped lead major efforts to hold corporations accountable for consumer harm. She also serves as co-lead counsel in the 23andMe data breach multi-district litigation, a high-profile case involving genetic privacy and consumer data security.
Overview of the Coinbase Data Breach
In May 2025, Coinbase Global, Inc. – the world’s largest cryptocurrency exchange, disclosed a data breach after discovering that rogue overseas support agents had been bribed to grant unauthorized access to internal systems. According to a USA Today report, the attackers compromised sensitive customer data, including account and identity-related information.
The breach came to light on May 11, when a cybercriminal contacted Coinbase claiming to have accessed internal documents and customer account details. Coinbase refused to pay a $20 million ransom and instead is offering a $20 million reward for information that leads to identifying those responsible. The company has notified the U.S. Department of Justice and is cooperating with international law enforcement.
Scope of the Breach
Coinbase confirmed that attackers accessed the following information from certain users:
- Full names, phone numbers, and email addresses
- Partial Social Security numbers
- Masked bank account details and identifiers
- Government-issued ID images
- Account data such as transaction history and balance snapshots
Importantly, Coinbase stated that passwords, wallet credentials, and private keys were not compromised.
Understanding the Risks
Even without direct access to funds, this type of personal data can be exploited in multiple ways:
- Phishing scams impersonating Coinbase
- Synthetic identity fraud
- Tax fraud or credit line creation
- Dark web data sales and repeated targeting
Victims may face long-term financial stress, account restrictions, and identity theft-related complications. For more information on how breaches lead to fraud, see our blog on identity theft risks from data breaches.
Steps to Protect Your Information
To reduce your risk of identity theft or fraud, Coinbase users are encouraged to:
- Enable withdrawal allow-listing in your account settings
- Turn on app-based two-factor authentication (avoid SMS only)
- Monitor your Coinbase and bank accounts for unusual activity
- Be cautious of texts or emails claiming to be from Coinbase
- Freeze your credit with all three major credit bureaus
- Consider using an identity protection service that offers dark web monitoring
Who May Be Eligible in the Coinbase Data Breach
You may qualify for a legal claim if:
- You received a data breach notification from Coinbase Global, Inc.
- You reside in California
- You’ve experienced phishing, fraud, or identity misuse following the breach
- Your personal data—such as your name, SSN, or government ID—was part of the compromised information
How CaseyGerry Can Help
For decades, CaseyGerry has successfully represented individuals in major data breach, privacy, and consumer protection cases. Our team is currently reviewing claims tied to the Coinbase breach, particularly those involving California residents.
Contact Us for a Free Consultation
If you believe you may be eligible, we invite you to contact us for a free, confidential consultation.
📞 Call (619) 238-1811 or fill out a form to schedule a free consultation
Time matters in cases like this. Take action.
—-