A former customer service agent at Coinbase has been arrested in India for allegedly aiding hackers in the theft of sensitive customer information from the company’s database. The arrest took place in Hyderabad, the capital of Telangana and a noted tech hub in India, and authorities have indicated that further arrests may follow.
Coinbase, a prominent American cryptocurrency exchange and financial services provider, boasts over 100 million registered users across 100 countries, with a staggering quarterly trading volume exceeding $235 billion. In May 2025, the company revealed that rogue customer support agents had collaborated with hackers who demanded a $20 million ransom in exchange for not leaking information stolen from a compromised database.
The data breach reportedly impacted around 69,500 customers, exposing critical personal information, including names, dates of birth, the last four digits of Social Security numbers, physical addresses, phone numbers, and email addresses. Additionally, some customers had their scanned documents related to “know your customer” (KYC) processes compromised.
In June, Coinbase provided insights regarding the breach, clarifying that it had originated through TaskUs, a customer support outsourcing firm located in India. Allegedly, hackers bribed certain employees to gain unauthorized access to the systems. TaskUs responded by stating that the incident involved only two individuals and subsequently shut down the entire department containing 226 employees.
The news of the arrest comes in the wake of other fraud cases related to Coinbase. Recently, a New York resident, Ronald Spektor, 23, was charged with impersonating Coinbase to defraud customers. Victims were misled into believing their accounts had been compromised and were instructed to transfer their digital assets to a “safe” wallet. In reality, the funds were redirected to Spektor’s own wallet, allowing him to collect $16 million from approximately 100 victims, with only $605,000 of that amount having been recovered so far.
As investigations continue, the repercussions of these incidents highlight the vulnerabilities in customer support systems and the importance of securing sensitive user data within the cryptocurrency sector.
