Michaela
Coinbase CEO Brian Armstrong has announced that Indian authorities have arrested a former customer service agent in Hyderabad over a data breach at the crypto exchange earlier this year.
Key Points
- A former Coinbase support agent in Hyderabad has been arrested in connection with a 2025 data breach.
- The breach stemmed from a bribery scheme targeting offshore TaskUs staff, compromising sensitive user information.
- Coinbase continues to face crypto-related security threats, including phishing schemes like the Ronald Spektor case.
“Thanks to the Hyderabad Police in India, an ex-Coinbase customer service agent was just arrested. Another one down and more still to come,” Armstrong wrote in an X post over the weekend. Armstrong emphasized that Coinbase will maintain close cooperation with law enforcement to ensure those responsible are held accountable.
The data breach, which Coinbase reportedly identified in January 2025 but disclosed at a later date, originated from a bribery scheme involving offshore customer support staff at TaskUs. According to reports, cybercriminals allegedly compensated agents to access internal systems and steal sensitive user information, including names, contact details, partial Social Security numbers, fragments of banking data, and images of government-issued identification such as passports and driver’s licenses.
In September, an amended class-action complaint filed in the Southern District of New York named TaskUs employee Ashita Mishra as a central figure in the Coinbase data breach, with alleged involvement beginning in September 2024. Investigators contend that Mishra stored personal information from over 10,000 Coinbase customers on her phone and reportedly took up to 200 photos per day. The filing describes a “hub-and-spoke” operation, in which Mishra and an accomplice directed smaller groups of TaskUs staff to collect and distribute sensitive user data.
Related: 7 Critical Things You Must Know Before Using Non-Custodial Wallets
The class-action complaint also alleged that TaskUs employees received bribes of $200 per photo for capturing customer information directly from their computer screens. The scheme is estimated to have generated over $500,000, compromising sensitive data belonging to thousands of Coinbase users.
Separately, Coinbase has been in the spotlight following the indictment of 23-year-old Brooklyn resident Ronald Spektor, who faces 31 charges for allegedly orchestrating a phishing scheme that defrauded nearly 100 Coinbase users of approximately $16 million.
Related: CZ Unveils Fix for Address Poisoning After $50M Crypto Scam Loss
Authorities say Spektor allegedly warned users that their funds were at risk of a hack, convincing them to transfer cryptocurrency to a wallet under his control. He then reportedly emptied the accounts and attempted to launder the stolen assets using crypto mixers, online exchange platforms, and gambling sites.
This development spotlights the serious consequences of insider threats in the crypto industry and highlights the ongoing importance of safeguarding sensitive user information. It serves as a reminder that robust security practices and vigilance remain critical for both platforms and users in the evolving digital asset space.
Frequently Asked Questions
MICHAELA
Michaela is a news writer focused on cryptocurrency and blockchain topics. She prioritizes rigorous research and accuracy to uncover interesting angles and ensure engaging reporting. A lifelong book lover, she applies her passion for reading to deeply explore the constantly evolving crypto world.
