Incident Briefing: Coinbase Discloses Breach of Customer Data
On May 15, 2025, the cryptocurrency exchange Coinbase disclosed that it had been the victim of an extortion attempt following a breach of customer data. Coinbase stated that prior to receiving the extortion demand, it had independently discovered unauthorized access of customer data by “overseas support agents” using internal monitoring systems.
Coinbase states it will not pay the $20m extortion demand and is instead creating a $20m “reward fund” for information about the threat actor.
Join IANS Faculty member Jake Williams as he discusses what we know and how we can move forward to mitigate risk.
Fill out the form to access a recording of the briefing and a three-page written summary.
Request your free content download
Find similar resources
Incident Briefing: DeepSeek Disrupts the AI Market


Incident Briefing: Hacker Claims Theft of 6M Records from Oracle Cloud
On March 21, cybersecurity company CloudSEK discovered a threat actor claiming to be selling six million data records stolen from Oracle's cloud federated SSO login servers. Join IANS Faculty member Jake Williams as he discusses what we know and don’t know about this incident and the "so what?" for CISOs to communicate.

Emerging Issue Briefing Replay: Adapting to a Shifting Government Approach to Cyber
Changes in U.S. government spending are impacting cybersecurity for the private sector. This briefing breaks down actions that organizations can take to mitigate some government changes, including enhancing in-house threat intelligence analysis and reporting, preparing for regulatory changes, and preparing for increasingly likely hacktivism attacks.
