Coinbase Breach Timeline Disputed by Security Researcher

A security researcher, Jonathan Clark, has publicly challenged Coinbase's official timeline regarding a major data breach that exposed sensitive information of nearly 70,000 customers. Clark claims he was targeted by scammers on January 7, 2025, who possessed detailed personal and financial information that should have only been accessible through Coinbase, including his Social Security number and exact Bitcoin balance. He immediately reported the incident to Coinbase, receiving an initial acknowledgment from the company's Head of Trust & Safety, but received no further response despite multiple follow-ups.

Coinbase later disclosed to the US Securities and Exchange Commission in May 2025 that the breach occurred on December 26, 2024, but was not discovered until May 11, 2025, when attackers attempted to extort the company for $20 million. Clark disputes this timeline, providing emails and call records as evidence that the breach was known to Coinbase months before their public disclosure. The incident raises serious questions about Coinbase's breach notification practices and the security of customer data.