Amended Lawsuit Accuses TaskUs of Concealing Coinbase Data Breach

Core Insights - A class action lawsuit in New York against TaskUs has been amended to include new claims of systemic security failures and concealment related to a breach involving Coinbase customer data, with estimated losses reaching up to $400 million [1] Group 1: Breach Details - The breach originated in late 2024 and was disclosed by Coinbase in May, with the company claiming it was a criminal bribery scheme that exploited external vendors and some Coinbase staff outside the U.S., affecting less than 1% of monthly transacting users [2] - TaskUs allegedly had a coordinated scheme in its India operations where employees were bribed to photograph sensitive account information for criminals, leading to the dismissal of around 300 employees in January [4] Group 2: Company Actions - Coinbase has terminated its relationship with TaskUs, opting not to "pay the criminals" and instead offering a $20 million reward for information leading to arrests and convictions [3] - TaskUs is accused of concealing the breach's scope and silencing those with knowledge of it, including firing HR personnel investigating the breach, while misleading regulators about the breach's materiality [5] Group 3: Regulatory and Financial Implications - A Form 10-K filing from TaskUs in February did not mention the Coinbase breach, suggesting the company claimed it was unaware of any material data breach impacting its operations before Coinbase's acknowledgment in May [6]