Coinbase, Major Cryptocurrency Exchange Leak (employees and customers)

[whlx]

The leak includes email addresses, passwords (some in plaintext), and other personal details of Coinbase employees and customers, with publish dates ranging from late 2024 to early 2025.



Key points from the leaked data:

1. Multiple Coinbase employee email addresses are exposed, including some for support, custody, and management roles.
2. Plaintext passwords are visible for several accounts, which is a major security risk.
3. Some entries include additional details like full names, IP addresses, phone numbers, and social media handles.
4. The data comes from multiple sources, with publish dates ranging from October 2024 to January 2025.

• Examples:
  • contact@coinbase.com with password Moncompte33@@
  • faishalkinda@coinbase.com with password .%J7/Pr'drE.96$
  • suffian@coinbase.com with password 03002134412
• Some passwords are hashed (e.g., SHA-512) and include salts, indicating varying levels of security.

"California", "email": "nina.samarguliani@coinbase.com", "full_name": "Nina Samarguliani", "email_domain": "coinbase.com", "source_id": 16658, "country": "UNITED STATES", "record_modification_date": "2020-10-05T00:00:00Z", "country_code": "US", "document_id": "6c5a31c8-79f0-4f1f-957f-0c1b0f48a1c0"}, {"city": "San Francisco", "first_name": "Dave", "last_name": "Bean", "severity": 5, "account_modification_time": "2018-10-23T06:13:54Z", "domain": "coinbase.com", "email_username": "dave.bean", "spycloud_publish_date": "2019-05-09T00:00:00Z", "state": "CA", "email": "dave.bean@coinbase.com", "full_name": "Dave Bean", "email_domain": "coinbase.com", "source_id": 16658, "country": "UNITED STATES", "record_modification_date": "2020-10-05T00:00:00Z", "country_code": "US", "document_id": "7be23d9b-70b7-4c80-ab87-551b4c7d20fb"}, {"domain": "coinbase.com", "last_name": "Kim", "email_username": "slava.kim", "phone": "4158431515", "postal_code": "94104", "full_name": "Slava Kim", "email_domain": "coinbase.com", "city": "San Francisco", "first_name": "Slava", "severity": 5, "account_modification_time": "2018-10-23T06:12:45Z", "spycloud_publish_date": "2019-05-09T00:00:00Z", "state": "California", "address_1": "548 Market Street", "country": "UNITED STATES", "source_id": 16658, "email": "slava.kim@coinbase.com", "record_modification_date": "2020-10-05T00:00:00Z", "country_code": "US", "document_id": "73ccebfe-8cff-4f3d-93a0-1e939a70e9ac"}, {"domain": "coinbase.com", "last_name": "Pelle", "social_linkedin": ["steijn"], "email_username": "steijn.pelle", "phone": "4158431515", "full_name": "Steijn Pelle", "email_domain": "coinbase.com", "city": "San Francisco", "first_name": "Steijn", "severity": 5, "account_modification_time": "2018-10-08T15:24:10Z", "spycloud_publish_date": "2019-05-09T00:00:00Z", "state": "CA", "country": "UNITED STATES", "source_id": 16658, "email": "steijn.pelle@coinbase.com", "record_modification_date":