---

Secret knowledge, sudden split: the crypto exchange faces mounting legal and regulatory heat for a four-month silence over a breach affecting at least 69,000 customers.

Coinbase was alerted as early as January 2025 that hackers had siphoned tens of thousands of customer records from one of its overseas support vendors, but the exchange waited until 14 May to notify regulators and users, according to internal emails reviewed by Reuters and interviews with three people briefed on the incident.

The revelation comes as Coinbase abruptly terminated its relationship with TaskUs, the Texas-based outsourcing firm whose India call centre staff were allegedly bribed to leak screenshots and KYC files. At least 69,461 customers’ names, addresses, partial Social Security numbers, and ticket histories were exposed. Coinbase has warned investors that the breach could cost $180 million to $400 million in remediation and potential claims.

Coinbase said it discovered evidence of contractor misconduct, moved quickly to cut access, and is enhancing controls across all third-party vendors.

TaskUs confirmed it fired more than 200 employees in Indore after Coinbase raised alarms in January, but it insisted it “immediately escalated” the issue to its client. A TaskUs spokesperson said the company is “cooperating with law enforcement agencies in India and the United States.”

A four-month disclosure gap

Under the U.S. Securities and Exchange Commission’s new cyber-incident rule, publicly traded companies must file an 8-K within four business days of determining an incident is material. Coinbase’s May filing noted “prior months” of unauthorised activity but did not specify the January alert.

Such inaction could be considered to be a textbook case of material non-compliance. The SEC may ask for confirmation as to why the clock didn’t start in January.

A securities-fraud class action filed Monday in the Eastern District of Pennsylvania alleges Coinbase “withheld adverse information” that would have moved its share price. A separate negligence suit targets TaskUs in Manhattan federal court on behalf of affected users.

Court filings describe a small criminal ring that paid support agents to photograph Coinbase’s screens with personal identifiers visible. By March, the scheme had widened, with stolen credentials sold on Telegram channels tied to “pig-butchering” crypto scams. On 11 May, the hackers, emboldened by their haul, emailed Coinbase demanding $20 million in exchange for deleting the data.

Coinbase refused, instead offering a $20 million bounty for information leading to arrests.

Date	Event
Dec 2024	Earliest unauthorized access allegedly begins (court filings)
Jan 2025	TaskUs agent in Indore caught photographing Coinbase data; Coinbase alerted the same day; TaskUs fires >200 staff
Mar 2025	Breach spreads internally; plaintiffs say nearly 100k records compromised
11 May 2025	Hackers email Coinbase demanding $20 M ransom
14 May 2025	Coinbase files Form 8-K, admits “prior months” contractor abuse
15 May 2025	Public blog post + $20 M bounty; users learn of breach
21 May 2025	Maine AG notice lists 69,461 victims
28 May 2025	Class action against TaskUs (S.D.N.Y.)
2 Jun 2025	Reuters exposes Coinbase’s earlier knowledge; company severs TaskUs ties
3 Jun 2025	Stock volatility and regulatory scrutiny mount

Why TaskUs matters

TaskUs, founded in 2008 and now valued at around $1.5 billion, counts Meta and DoorDash among its clients. Crypto exchanges like Coinbase have leaned on the firm to provide 24/7 customer support at a lower cost than U.S. hires through its 61,400 full-time staff. Security consultants warn that offshoring sensitive identity documents to low-wage environments creates the perfect storm for insider bribery.

Human-layer attacks are increasingly outpacing technical exploits, as buying an underpaid agent is far cheaper than breaking robust encryption.

The breach occurs as Coinbase and other crypto stakeholders wage a public campaign for lighter U.S. crypto rules. Rival exchanges Kraken and Gemini, who also use business-process outsourcing shops, will now rush to audit their own vendor controls, according to people familiar with those reviews.

Meanwhile, affected Coinbase customers report continued phishing attempts and SIM-swap attacks. The company has offered two years of identity-theft monitoring but has not committed to reimbursing any downstream crypto losses.

What’s next

• Regulatory scrutiny – The SEC and Federal Trade Commission can assess potential disclosure-timing violations.
• Discovery trove – Plaintiffs will seek January-dated board minutes that could show executives debated, then deferred, disclosure.
• Vendor shake-up – Industry analysts expect fintechs to diversify away from single-provider support models and adopt screen-capture-blocking tools.

For Coinbase, the incident threatens balance-sheet costs and its narrative as the most compliant brand in crypto. Trust is the only hard currency an exchange has. Losing it, even for four months, can be fatal.

Mentioned in this article

---

A group of nine Democratic Senators announced that they will withdraw their support for the landmark U.S. stablecoin legislation unless changes are made to the bill.

In a joint statement issued on May 3, the Senators noted that there are several issues with the current version of the stablecoin bill known as the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act. The Senators noted:

“While we are eager to continue working with our colleagues to address these issues, we would be unable to vote for cloture should the current version of the bill come to the floor.”

The statement was signed by Senators Raphael Warnock, Catherine Cortez Masto, Ben Ray Luján, John Hickenlooper, and Adam Schiff. Surprisingly, Senators Ruben Gallego, Mark Warner, Lisa Blunt Rochester, and Andy Kim, all of whom supported the bill when it passed the Senate Banking Committee in March, were also among the signatories.

It is worth noting, however, that the two Senate Democrats co-sponsoring the GENIUS Act alongside lead sponsor Republican Senator Bill Hagerty — Kirsten Gillibrand and Angela Alsobrooks — did not sign the statement.

Senate Democrats want tighter regulations under the GENIUS Act

In their statement, the Senate Democrats noted that it is “critical for Congress to work in a bipartisan fashion” to establish clear rules and guidelines for stablecoins. Absence of such regulations leaves consumers “unprotected and vulnerable,” they stated.

However, they are determined to withhold support for the bill unless revisions are made. They added:

“We have approached this process constructively and with an open mind, with the understanding that additional improvements to the bill would be made.”

The Senate Democrats believe that the GENUIS Act needs “stronger provisions on anti-money laundering, foreign issuers, national security, preserving the safety and soundness of our financial system, and accountability for those who don’t meet the act’s requirements.”

It is worth noting that these nine Senate Democrats are not the only ones opposed to the bill. Senator Elizabeth Warren, one of the bill’s staunchest critics, warned that the bill could “green-light big-tech companies and other conglomerates to issue their own stablecoins.”

In a letter last month, a group of 20 community banking organizations also voiced their objections, arguing that the bill could displace traditional deposits and expose the financial system to new vulnerabilities.

All about the GENIUS Act

Hagerty, who authored the GENIUS Act, introduced the bill on Feb. 4, 2025. The bill aims to provide a regulatory framework for U.S. payment stablecoins. The passage of the GENIUS Act, therefore, will be the first step towards establishing comprehensive crypto regulation in the U.S.

Under the proposed GENIUS bill, stablecoin issuers will have to ensure that each issued token is backed 1:1 by U.S. Dollars, insured bank deposits, or short-term Treasury bills. Stablecoin issuers will also be able to choose between federal oversight under the Office of the Comptroller of the Currency (OCC) and state-level supervision.

The Senate Banking Committee passed the GENIUS Act in March with an 18-6 vote. Since then, Republicans have made changes to the bill, hoping to win over Democrats, according to a report by Politico. In fact, many of the changes pertained to the issues raised by the Senate Democrats in their statement on Saturday.

Republicans were assured of bipartisan support for the bill, so much so that Senate Majority Leader John Thune formally moved to expedite the consideration of the bill earlier this week. Senate Republicans were hoping to push the GENIUS Act for a floor vote by the end of May.

According to Politico, the first procedural vote for the bill is expected as soon as next week. However, the statement by the Senate Democrats is likely to put a kink in the Republicans’ plan, while giving them more leverage to extract more concessions.

The bill requires the support of at least seven Democrats to pass the Senate.

Sen. Hagerty responds to the Democrats’ statement

Responding to the statement issued by the Senate Democrats, Hagerty stated that it is time the U.S. advances legislation that will ensure its leadership in the digital asset space and protect the U.S. Dollar “for centuries to come.” He added:

“We have a choice here. Move forward and make any remaining changes needed in a bipartisan way, or show that digital asset and crypto legislation remains a solely Republican issue.”

Mentioned in this article

The U.K. needs to work harder at becoming a global center for the crypto industry to avoid falling behind countries like the U.S., industry executives told CNBC.

The country has been saying it wants to be a crypto hub since 2022, before the current Labour government was elected, yet only this week did it start seeking comments on draft legislation for the industry.

The European Union, meanwhile, has already implemented its Markets in Crypto Assets legislation (MiCA), which provides a uniform regime across the bloc, and the new U.S. administration of President Donald Trump is promoting the industry and relaxing regulation.

“If I look at the speed of innovation, I do feel that the U.S. is ahead — although they have their own challenges. But look at Singapore, Hong Kong — again, you see much more rapid innovation,” Jaidev Janardana, the CEO of digital bank Zopa, told CNBC. “I think we are still ahead of the EU, but we can’t remain complacent with that.”

Trump, for his part, has been urging departments to make crypto-friendly policies, and stablecoin legislation is working its way through the Senate. The stablecoin sector could surge 10-fold to reach $2 trillion within three years following the passage of the legislation, Standard Chartered has forecast.

“Other jurisdictions have started to seize the opportunity,” said Cassie Craddock, the managing director for U.K. and Europe at blockchain firm Ripple, in an interview with CNBC.

Mark Fairless, CEO of payments infrastructure firm ClearBank, said his business has been looking to develop its own stablecoin and has been held back by the lack of regulatory clarity.

Stablecoins are “part of our medium-term, longer-term strategy,” Fairless told CNBC. “We see ourselves well set up for that.” However, he added, a ClearBank stablecoin will be possible only once there’s clarity from U.K. regulators including the Bank of England.

Still, the country hasn’t entirely missed the bus.

“The U.K. is still that great place to set up. We have all the ingredients there, because we’ve got the ecosystem, we do have this talent setting up new businesses,” Lisa Jacobs, CEO of business lending platform Funding Circle, said. “But it needs to continue. We can’t rest on our laurels.”

“I think the U.K. will get it right — but there is a risk if you get it wrong that you drive innovation to other markets,” Keith Grose, Coinbase’s U.K. head, told CNBC.

Read more: The UK Has Created Crypto Banking Problems

The Apple news has been gloomy lately, mostly because of all the tariff turmoil, but before that, there was all the drama about Siri and the company’s inability to deliver on promised Apple Intelligence features. Well, in case you forgot, the New York Times is here to remind you that the Siri drama hasn’t gone away.

Tripp Mickle reports on Apple’s “inability to make good on new ideas,” providing insight from unnamed sources about the company’s mishandling of AI development. Bloomberg’s Mark Gurman previously reported that Apple will delay the new AI-based Siri features until 2026, but near the end of MIckle’s article is a glimmer of hope–or some hopeful thinking by some Apple insiders:

Apple hasn’t canceled its revamped Siri. The company plans to release a virtual assistant in the fall capable of doing things like editing and sending a photo to a friend on request, three people with knowledge of its plans said.

Tripp Mickle, New York Times

That sounds like it will arrive in the first version of iOS 19, rather than iOS 19.3 or later in 2026, as some had speculated. Mickle goes on to report that Apple leaders think there is “time to get [AI] right” because Google, Meta, and others haven’t figured it out yet. That might be true, but it sure seems like Apple’s competition has its AI plans in much better shape than Apple.

If Apple truly believes it can deliver this fall, then that will make WWDC25 in June much more interesting and give us something to care about. Apple will almost certainly address the Siri situation then–it has to, it’s the elephant in the room–and the company will either proclaim a Siri delivery in the fall or a much later date. We’ll have to wait and see.