Coinbase CEO Brian Armstrong confirmed Hyderabad police arrested a former Coinbase support agent in connection with the May 2025 data breach and extortion attempt that included a reported $20 million ransom demand. The arrest is described as a breakthrough in a multinational probe that has also produced related U.S. charges against an impersonation ring using leaked customer data.

Coinbase disclosed that Hyderabad police have arrested an ex-Coinbase customer-service agent alleged to have been involved in the May 2025 data breach and subsequent extortion scheme that sought about $20 million. According to company statements and law‑enforcement reporting, bribed overseas support staff provided access or leaked customer details that were later used by an impersonation ring to extort and defraud users. Coinbase CEO Brian Armstrong called the development an important investigative breakthrough and noted ongoing cooperation with Indian and U.S. authorities. U.S. prosecutors previously charged individuals believed to have exploited the leaked data to impersonate customers and launder proceeds. The arrest in India adds a potential insider dimension that investigators say explains how sensitive records left the company’s systems. The matter has prompted renewed calls for tightened internal controls at exchanges and more cross‑border law enforcement coordination, and Coinbase said it would continue notifying affected customers while pursuing civil and criminal remedies.