Did Coinbase Hide Critical Breaches? New Lawsuits Raise Big Questions

A new class-action lawsuit targets Coinbase and its top executives following a series of data and regulatory breaches. The lawsuit alleges the cryptocurrency exchange misled investors, causing major financial losses during a critical trading window. The case may have serious implications for Coinbase, which has already faced increased scrutiny and falling share prices.

Data Breach and FCA Fine Spark Lawsuit

As if that wasn’t enough, Coinbase was hit with serious legal fire this week after it announced a substantial data breach and significant regulatory violation in the UK. On May 15, the company said hackers accessed customer data by getting into its internal computer systems via bribed employees. Coinbase also admitted that the breach could lead to losses of up to $400 million.

The breach, disclosed this month, was first made public in December 2024, but the company did not communicate about it until May. Coinbase shares fell 7.25% on the day of the disclosure to $240 a share. The stock shot up the next day, closing at $266, but concerns persisted.

Investors say the delayed disclosure misled them about the company’s risk exposure. The lawsuit says Coinbase’s failure to secure its system and customer data resulted in financial loss. Individuals who purchased shares between April 2021 and May 2025 led the plots.

Coinbase Faces Biometric Data Lawsuit

Alongside the class-action suit, Coinbase is facing a separate biometric data privacy lawsuit in Illinois. This complaint alleges the company mishandled user biometric information without proper consent or transparency. It further accuses Coinbase of violating data protection obligations by not informing users about biometric data collection practices.

Regulators have increasingly focused on data compliance, especially in the cryptocurrency industry where user trust is vital. Legal experts say such allegations, if proven, could lead to additional fines and stricter oversight. Coinbase has not yet responded to the biometric-related claims.

The ongoing litigation adds pressure to a company already facing scrutiny over its compliance practices. Investors say the failures in data handling show broader issues in Coinbase’s internal security measures. In response to these legal developments, the stock performance has been volatile.

FCA Fine Adds to Regulatory Trouble

Last year, the Financial Conduct Authority fined Coinbase’s UK subsidiary, Coinbase Payments Ltd, $4.5 million in July 2024. The fine arose after the company onboarded more than 13,000 high-risk customers in breach of a previous agreement with the FCA. The regulator found that these individuals transacted over USD 220 million of potentially suspicious activity.

This disclosure led to a 5.5% drop in Coinbase stock on July 25, 2024, closing at $226.5. Investors argue this event highlighted ongoing regulatory failings that should have been disclosed earlier. The lawsuit claims the failure to report the FCA issue at the time of the IPO was misleading.

Plaintiff Brady Nessler asserts that Coinbase should have informed investors about the risks tied to such violations. The complaint includes CEO Brian Armstrong and CFO Alesia Haas as named defendants. Coinbase has not released any official statement on either lawsuit to date.

FAQs

What is the Coinbase lawsuit about?

The lawsuit accuses Coinbase of hiding data breaches and regulatory issues that caused investor losses.

Who filed the lawsuit?

Investor Brady Nessler filed the class-action lawsuit in Pennsylvania federal court on May 22, 2025.

What are the allegations related to the FCA?

Coinbase is accused of allowing high-risk users to transact, violating a prior agreement with the UK regulator.

How did the data breach happen?

Hackers accessed Coinbase’s systems by bribing customer service agents and compromising internal security.

What could be the financial impact on Coinbase?

The company estimates the breach alone could cost over $400 million in losses and related expenses.

Glossary of Key Terms

Coinbase – A major cryptocurrency exchange platform based in the United States.

FCA – Financial Conduct Authority, the financial regulatory body in the United Kingdom.

Biometric Data – Unique personal data, such as fingerprints or facial scans, used for identity verification.

IPO – Initial Public Offering, when a company first offers its shares to public investors.

Class-Action Lawsuit – A legal action filed by one party on behalf of a larger group with similar claims.

Reference:

Court Listener

Finance Magnate