Coinbase

Cybercriminals bribed overseas support contractors to access internal tools, exposing personal data (names, addresses, government IDs) of roughly 1 million users. Coinbase estimated costs exceeding $400 million for remediation and reimbursements.

Attackers exploited a vulnerability in Coinbase's SMS-based two-factor authentication process to bypass account protections and steal cryptocurrency from at least 6,000 customer accounts.