ZeroHour

coinbase cartel

ransomware group · aka Coinbase Cartel, coinbase cartel · unknown; the brand is publicly associated with the ShinyHunters-linked actor cluster behind the 2025 Coinbase customer-data extortion (Google Threat Intelligence/Mandiant reporting, 2025). Reported ties to the broader 'Scattered Lapsus$ Hunters' community are not definitively confirmed. · active since 2025-05 (May 2025), when the 'Coinbase Cartel' name emerged during the Coinbase data-theft extortion campaign; subsequent leak-site victim posting tracked by public ransomware trackers since mid-2025.

Victims · 7d
0flat
Victims · 30d
37active targets
Victims · 90d
56
All-time (tracked)
240since 2025-09-15
Last post
08-31 00:30UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

Coinbase Cartel is a data-theft extortion group that rose to prominence in May 2025 when it extorted Coinbase over customer data stolen via bribed offshore support contractors, demanding a $20 million ransom (Coinbase SEC disclosure/company statement, 2025). It has since operated its own leak site, claiming victims across a wide range of sectors and geographies, including retail, insurance, healthcare, legal, transportation, and financial services. Public reporting describes pure extortion, with stolen data published or threatened for publication and no ransomware/encryption use documented; researchers have linked the brand to the ShinyHunters/Scattered Lapsus$ Hunters ecosystem. As tracked by this dashboard, the group has posted 58 victims since 2026-06-13, with its most recent post on 2026-08-31. No specific CVEs are publicly tied to its intrusions; reported access relies on social engineering and contractor/insider bribery rather than exploited software vulnerabilities.

Tactics & tooling
  • Voice phishing and social engineering of employees, help desks, and outsourced support staff
  • Bribery of third-party support contractors to exfiltrate customer data from CRM systems (reported in the 2025 Coinbase breach)
  • Pure data extortion: publication of stolen data on a leak site; no encryption or ransomware use documented
  • Direct contact of victims' customers using stolen data to add pressure (reported during the 2025 Coinbase campaign)
  • Broad, multi-region and multi-sector victim selection with no obvious geographic or industry focus
  • Publicly associated by researchers with the ShinyHunters/Scattered Lapsus$ Hunters ecosystem, known for SaaS/CRM-focused vishing; per-post attribution is uncertain
Targeted sectors
Retail / e-commerceInsuranceHealthcareLegal servicesTransportation / logisticsFinancial services / microfinanceEngineering / industrialMarketing / creative services
Notable public victims

Westwing Group SE, Integrated Health Systems, RXPE Group, Tower Insurance, Flecha Bus, OTEIS Conseil & Ingénierie, Longhorn Investments, Kessler Creative, Klasko Immigration Law Partners, Patel

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
Westwing Group SE · 15d agoFurniture - $465.5 Million
Integrated Health Systems · 17d agoBusiness Services - $9.3 Million
RXPE Group · 17d agoElectronics - $319 Million
Tower Insurance · 17d agoInsurance - $283.7 Million
Flecha Bus · 17d agoTransportation, Freight & Logistics Services - $366.3 Million
OTEIS Conseil & Ingénierie · 17d agoArchitecture, Engineering & Design - $69.8 Million
Longhorn Investments · 17d agoFinance - $15.5 Million
Kessler Creative · 17d agoAdvertising Networks - $17.1 Million
Klasko Immigration Law Partners · 17d agoLaw Firms & Legal Services - $19.7 Million
Patel · 17d agoAccounting For Legal Practices - $5 Million
Abacus Advisors · 17d agoAccounting For Legal Practices - $5 Million
LifeBank Microfinance Foundation · 17d agoFinance - $5 Million
PT Perusahaan Jamu Air Mancur · 17d agoPharmaceuticals & Healthcare - $100 Million
PT. Bank Perekonomian Rakyat Bintan · 17d agoBanking & Financial Services - $5 Million
Crowe · 20d agoAccounting For Legal Practices - $1.3 Billion
Advanced Engineering Consultants · 20d agoArchitecture, Engineering & Design - $14.8 Million
Westwing Group SE NEW · 22d agoFurniture - $465.5 Million
Integrated Health Systems NEW · 24d agoBusiness Services - $9.3 Million
RXPE Group NEW · 24d agoElectronics - $319 Million
Tower Insurance NEW · 24d agoInsurance - $283.7 Million
Flecha Bus NEW · 24d agoTransportation, Freight & Logistics Services - $366.3 Million
OTEIS Conseil & Ingénierie NEW · 24d agoArchitecture, Engineering & Design - $69.8 Million
Longhorn Investments NEW · 24d agoFinance - $15.5 Million
Kessler Creative NEW · 24d agoAdvertising Networks - $17.1 Million
Klasko Immigration Law Partners NEW · 24d agoLaw Firms & Legal Services - $19.7 Million
Patel NEW · 24d agoAccounting For Legal Practices - $5 Million
Abacus Advisors NEW · 24d agoAccounting For Legal Practices - $5 Million
LifeBank Microfinance Foundation NEW · 24d agoFinance - $5 Million
PT Perusahaan Jamu Air Mancur NEW · 24d agoPharmaceuticals & Healthcare - $100 Million
PT. Bank Perekonomian Rakyat Bintan NEW · 24d agoBanking & Financial Services - $5 Million
Sweet Water Holdings · 25d agoFinance - Undisclosed
Turner and Townsend · 25d agoEngineering - $1,6 Billion
Serruya private equity · 25d agoFinance - $20 Million
Accesso · 25d agoFinancial Software - $152 Million
Hitachi High-Tech · 25d agoAutomation & Materials - $4.7 Billion
Crowe NEW · 27d agoAccounting For Legal Practices - $1.3 Billion
Advanced Engineering Consultants NEW · 27d agoArchitecture, Engineering & Design - $14.8 Million
Turner and Townsend NEW · Aug 14, 2026Engineering - $1,6 Billion
Serruya private equity NEW · Aug 14, 2026Finance - $20 Million
Sweet Water Holdings NEW · Aug 14, 2026Finance - Undisclosed
Hitachi High-Tech NEW · Aug 13, 2026Industrial Automation & Materials - $4.7 Billion
CEN and Cenelec · Aug 8, 2026Membership Organizations - $21.9 Million
MIM Fertility · Aug 8, 2026Healthcare Software - $10.5 Million
M. B. Kahn Construction Co. · Aug 8, 2026Construction - $500 Million
Xs Cad · Aug 8, 2026Architecture - $26.9 Million
CEN and Cenelec NEW · Aug 2, 2026Membership Organizations - $21.9 Million
MIM Fertility NEW · Aug 2, 2026Healthcare Software - $10.5 Million
M. B. Kahn Construction Co. NEW · Aug 2, 2026Construction - $500 Million
Xs Cad NEW · Aug 2, 2026Architecture - $26.9 Million
Accesso NEW · Jul 28, 2026Financial Software - $152.3 Million

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .