coinbase cartel
ransomware group · aka Coinbase Cartel, coinbase cartel · unknown; the brand is publicly associated with the ShinyHunters-linked actor cluster behind the 2025 Coinbase customer-data extortion (Google Threat Intelligence/Mandiant reporting, 2025). Reported ties to the broader 'Scattered Lapsus$ Hunters' community are not definitively confirmed. · active since 2025-05 (May 2025), when the 'Coinbase Cartel' name emerged during the Coinbase data-theft extortion campaign; subsequent leak-site victim posting tracked by public ransomware trackers since mid-2025.
Coinbase Cartel is a data-theft extortion group that rose to prominence in May 2025 when it extorted Coinbase over customer data stolen via bribed offshore support contractors, demanding a $20 million ransom (Coinbase SEC disclosure/company statement, 2025). It has since operated its own leak site, claiming victims across a wide range of sectors and geographies, including retail, insurance, healthcare, legal, transportation, and financial services. Public reporting describes pure extortion, with stolen data published or threatened for publication and no ransomware/encryption use documented; researchers have linked the brand to the ShinyHunters/Scattered Lapsus$ Hunters ecosystem. As tracked by this dashboard, the group has posted 58 victims since 2026-06-13, with its most recent post on 2026-08-31. No specific CVEs are publicly tied to its intrusions; reported access relies on social engineering and contractor/insider bribery rather than exploited software vulnerabilities.
- Voice phishing and social engineering of employees, help desks, and outsourced support staff
- Bribery of third-party support contractors to exfiltrate customer data from CRM systems (reported in the 2025 Coinbase breach)
- Pure data extortion: publication of stolen data on a leak site; no encryption or ransomware use documented
- Direct contact of victims' customers using stolen data to add pressure (reported during the 2025 Coinbase campaign)
- Broad, multi-region and multi-sector victim selection with no obvious geographic or industry focus
- Publicly associated by researchers with the ShinyHunters/Scattered Lapsus$ Hunters ecosystem, known for SaaS/CRM-focused vishing; per-post attribution is uncertain
Westwing Group SE, Integrated Health Systems, RXPE Group, Tower Insurance, Flecha Bus, OTEIS Conseil & Ingénierie, Longhorn Investments, Kessler Creative, Klasko Immigration Law Partners, Patel
No public figure.
Leak-site victims240 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| ATG - New samples added | · Mar 15, 2026 | — |
| ILLUMINA - Data uploaded | · Mar 15, 2026 | — |
| Dolby Laboratories - updated Sample | · Mar 15, 2026 | — |
| Canada Goose | · Mar 11, 2026 | — |
| Lacoste | · Mar 11, 2026 | — |
| Staples | · Mar 11, 2026 | — |
| JBS Brazil - We have 3TB of your data - Pics added | · Mar 11, 2026 | — |
| JBS Brazil - We have 3TB of your data | · Mar 5, 2026 | — |
| SK-Telecom - Data reuploaded | · Feb 28, 2026 | — |
| Triumph International | · Feb 27, 2026 | — |
| Symeta | · Feb 24, 2026 | — |
| Triumph Group | · Feb 24, 2026 | — |
| Westwing Home & Living | · Feb 24, 2026 | — |
| Dalet | · Feb 24, 2026 | — |
| Aptean | · Feb 24, 2026 | — |
| PT Ikapharmindo Putramas | · Feb 16, 2026 | — |
| Mold Tech | · Feb 16, 2026 | — |
| Efficy | · Feb 16, 2026 | — |
| Logility | · Feb 6, 2026 | — |
| Neuviz | · Jan 31, 2026 | — |
| CigamSoftware | · Jan 31, 2026 | — |
| Pellenc | · Jan 31, 2026 | — |
| Dolby Laboratories | · Jan 31, 2026 | — |
| NGC Software | · Jan 29, 2026 | — |
| Clatronic International | · Jan 28, 2026 | — |
| RAKS Sp. z o.o. | · Jan 28, 2026 | — |
| Pacific Airlines | · Jan 28, 2026 | — |
| Insight | · Dec 20, 2025 | Industry: Tech Revenue: $8.7 Billion Website: insight.com |
| ILLUMINA | · Dec 16, 2025 | Industry: Manufacturing Revenue: $4.3 Billion Website: illumina.com |
| Twinsoft | · Dec 12, 2025 | Industry: Tech Revenue: $14.6 Million Website: twinsoft.gr |
| Solarpro Holding | · Dec 12, 2025 | Industry: Solar Revenue: $9.7 Million Website: solarpro.bg |
| Maven Solutions | · Dec 12, 2025 | Industry: Tech Revenue: Undisclosed Website: mavensolutions.net |
| Arcom Digital | · Dec 12, 2025 | Industry: Tech Revenue: $14.7 Million Website: arcomdigital.com |
| ATG | · Dec 12, 2025 | Industry: Gambling Revenue: $42.6 Million Website: atg.se |
| GDEV | · Dec 12, 2025 | Industry: Gaming Revenue: $464.5 Million Website: gdev.inc |
| C*** | A******** - Contact us by monday | · Dec 12, 2025 | Industry: Tech Revenue: $23 Billioin Roughly Website: secret.com |
| Acu Trans Solutions | · Dec 9, 2025 | Industry: Business Services Revenue: $6.4 Million Website: www.acutranssolutions.com |
| Arabian Escapes | · Dec 9, 2025 | Industry: Real Estate Revenue: $9 Million Website: www.arabianescapes.com |
| Homes 4 Life | · Dec 9, 2025 | Industry: Real Estate Revenue: $22.6 Million Website: www.homes4life.ae |
| Elysian Real Estate | · Dec 9, 2025 | Industry: Real Estate Revenue: $23.9 Million Website: www.elysian.com |
| Harbor Real Estate | · Dec 9, 2025 | Industry: Real Estate Revenue: $32.5 Million Website: www.harbordubai.com |
| Savills Middle East/Cluttons | · Dec 9, 2025 | Industry: Real Estate Revenue: $55.7 Million Website: www.savills.me |
| Betterhomes | · Dec 9, 2025 | Industry: Real Estate Revenue: $60.4 Million Website: www.bhomes.com |
| Hunt & Harris Real Estate | · Dec 9, 2025 | Industry: Real Estate Revenue: $28 Million Website: www.huntandharris.com |
| Coldwell Banker UAE | · Dec 9, 2025 | Industry: Real Estate Revenue: $17.3 Million Website: www.coldwellbanker.ae |
| One Broker Group | · Dec 9, 2025 | Industry: Real Estate Revenue: $100.8 Million Website: www.obg.ae |
| Sotheby’s International Realty | · Dec 9, 2025 | Industry: Real Estate Revenue: $13 Billion Website: sothebysrealty.ae |
| Renesas Electronics | · Dec 6, 2025 | Industry: Manufacturing Revenue: $10 Billion Website: www.renesas.com |
| R* E* | · Dec 3, 2025 | Industry: Technology Revenue: 1 Billion + Website: secret |
| amcor | · Nov 25, 2025 | Industry: Manufacturing Revenue: $17.4 Billion Website: amcor.com |
In the newsAll →
No articles mention this group yet.