Coinbase experienced cybersecurity attack on one of its employees earlier this month, no funds stolen

Coinbase recently experienced a cybersecurity attack targeting one of its employees, however, Coinbase's network controls prevented the attacker from gaining direct system access, no funds were stolen, and no customer information was accessed or viewed, but some of the Coinbase employees Limited contact information was stolen, specifically employee names, email addresses and some phone numbers. Late on the night of Sunday, February 5, 2023, several employees received text alerts on their cell phones indicating that they needed to urgently log in via the link provided to receive important messages, Coinbase said. An employee believed this to be an important and legitimate message and clicked on the link and entered a username and password. The attacker obtained the username and password of the Coinbase employee and repeatedly tried to remotely access Coinbase. However, Coinbase network controls prevented the attacker from gaining direct system access without the attacker being able to provide the required multi-factor authentication (MFA) credentials. Coinbase said its Computer Security Incident Response Team (CSIRT) resolved the issue within the first 10 minutes of the attack.