8 Shocking Claims from Coinbase Data Breach Lawsuit

Core Points - The lawsuit against TaskUs alleges a significant data breach affecting Coinbase customers, with claims of a coordinated criminal campaign involving numerous employees [5][4][2] - Coinbase estimates that customers have lost up to $400 million due to the breach, with many victims suffering substantial financial losses [4][9] - The breach has reportedly affected at least 70,000 individuals, marking it as one of the largest security breaches in the cryptocurrency sector [5][4] Allegations of Negligence - TaskUs is accused of failing to monitor its computer network adequately, which allowed the breach to occur and continue without detection [7][8] - The lawsuit claims that TaskUs had policies in place to protect sensitive data, but these were poorly enforced and ineffective [7][8] - Employees allegedly exploited their access to sensitive information, with some reportedly taking photographs of data to sell to criminals [12][13] Impact on Victims - Victims of the breach have faced ongoing threats, including identity theft and physical attacks, with many receiving harassing communications from criminals [3][9] - The lawsuit highlights that victims were not given timely information to protect themselves, leading to significant financial losses [6][4] - The potential for future fraud and identity theft remains high, as the stolen data can be used for various criminal activities [10][9] Financial Motives - The average salary for TaskUs employees in India is significantly lower than their U.S. counterparts, which may have created financial incentives for involvement in the breach [12] - Allegations suggest that employees could earn substantial sums by selling sensitive information, with claims of bribes amounting to over $500,000 [13][12] Timeline of Events - The conspiracy is believed to have started as early as September 2024, with the breach being discovered in January 2025, but not disclosed to the public until May 2025 [14][18] - TaskUs employee Ashita Mishra was identified as a key figure in the conspiracy, allegedly taking hundreds of pictures of sensitive data [15][14] Company Responses - Coinbase's public statements regarding the breach have been described as misleading, with claims that the company delayed disclosure until threatened with a ransom [18][19] - The lawsuit demands compensation for victims and calls for reforms in TaskUs' operational infrastructure to prevent future breaches [20]