Coinbase was aware that support reps were suspiciously accessing customer data when its CEO tweeted that the CFPB should be "deleted". Among other things, the CFPB has pursued legal action against financial companies that failed to secure sensitive customer data.
Coinbase’s substantial data breach coincides with a convenient terms of service update, while the GENIUS Act stablecoin bill regains momentum in the Senate.
In April, Coinbase announced changes to its user agreement that added two clauses further limiting class action lawsuits and requiring lawsuits to be filed in New York. The changes apply to disputes initiated after May 15.
Coinbase announces it's joining the S&P 500 and then announces a serious data breach two days later.
oof.
The only data Coinbase has disclosed about the scale of the breach is that it affects "less than 1% of Coinbase monthly transacting users", which seems super cagey.