coinbase cartel
ransomware group · aka Coinbase Cartel, coinbase cartel · unknown; the brand is publicly associated with the ShinyHunters-linked actor cluster behind the 2025 Coinbase customer-data extortion (Google Threat Intelligence/Mandiant reporting, 2025). Reported ties to the broader 'Scattered Lapsus$ Hunters' community are not definitively confirmed. · active since 2025-05 (May 2025), when the 'Coinbase Cartel' name emerged during the Coinbase data-theft extortion campaign; subsequent leak-site victim posting tracked by public ransomware trackers since mid-2025.
Victims · 7d
0flat
Victims · 30d
37active targets
Victims · 90d
56
All-time (tracked)
240since 2025-09-15
Last post
08-31 00:30UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Coinbase Cartel is a data-theft extortion group that rose to prominence in May 2025 when it extorted Coinbase over customer data stolen via bribed offshore support contractors, demanding a $20 million ransom (Coinbase SEC disclosure/company statement, 2025). It has since operated its own leak site, claiming victims across a wide range of sectors and geographies, including retail, insurance, healthcare, legal, transportation, and financial services. Public reporting describes pure extortion, with stolen data published or threatened for publication and no ransomware/encryption use documented; researchers have linked the brand to the ShinyHunters/Scattered Lapsus$ Hunters ecosystem. As tracked by this dashboard, the group has posted 58 victims since 2026-06-13, with its most recent post on 2026-08-31. No specific CVEs are publicly tied to its intrusions; reported access relies on social engineering and contractor/insider bribery rather than exploited software vulnerabilities.
Tactics & tooling
- Voice phishing and social engineering of employees, help desks, and outsourced support staff
- Bribery of third-party support contractors to exfiltrate customer data from CRM systems (reported in the 2025 Coinbase breach)
- Pure data extortion: publication of stolen data on a leak site; no encryption or ransomware use documented
- Direct contact of victims' customers using stolen data to add pressure (reported during the 2025 Coinbase campaign)
- Broad, multi-region and multi-sector victim selection with no obvious geographic or industry focus
- Publicly associated by researchers with the ShinyHunters/Scattered Lapsus$ Hunters ecosystem, known for SaaS/CRM-focused vishing; per-post attribution is uncertain
Targeted sectors
Retail / e-commerceInsuranceHealthcareLegal servicesTransportation / logisticsFinancial services / microfinanceEngineering / industrialMarketing / creative services
Notable public victims
Westwing Group SE, Integrated Health Systems, RXPE Group, Tower Insurance, Flecha Bus, OTEIS Conseil & Ingénierie, Longhorn Investments, Kessler Creative, Klasko Immigration Law Partners, Patel
Estimated earnings
No public figure.
Leak-site victims240 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Amcore | · Nov 25, 2025 | Industry: Manufacturing Revenue: $17.4 Billion Website: amcore.com |
| CIGAM Software Corporativo Ltda | · Nov 20, 2025 | Industry: ERP Revenue: $136.7 Million Website: cigam.com.br |
| SAExploration | · Nov 20, 2025 | Industry: Oil and Gas Revenue: $158.1 Million Website: saexploration.com |
| Kewaunee Scientific | · Nov 20, 2025 | Industry: Manufacturing Revenue: $263.2 Million Website: kewaunee.com |
| PACCAR | · Nov 13, 2025 | Industry: Manufacturing / Tech Revenue: $31.1 Billion Website: paccar.com |
| Avery Dennison | · Nov 13, 2025 | Industry: Manufacturing Revenue: $8.7 Billion Website: averydennison.com |
| Cinvestav | · Nov 13, 2025 | Industry: Education Revenue: $224.4 Million Website: cinvestav.mx |
| SGK INC | · Nov 13, 2025 | Industry: Advertising & Marketing Revenue: $548 Million Website: sgkinc.com |
| Propertyfinder / PropSpace CRM | · Nov 10, 2025 | Industry: Real Estate Tech Revenue: $614.8 million Website: propertyfinder.ae |
| Dreyfuss Williams & Associates CO LPA | · Nov 10, 2025 | Industry: Legal Firm Revenue: $18.9 Million Website: dreyfuss.com |
| Property Finder / PropSpace | · Nov 4, 2025 | Industry: Real Estate Tech Revenue: $614.8 Million Website: propertyfinder.ae |
| CEVA LOGISTICS - THIS DATABASE IS FOR SALE | · Nov 3, 2025 | Industry: Logistics Revenue: $20.2 Billion Website: cevalogistics.com |
| SK-Telecom | · Oct 29, 2025 | Industry: Technology Revenue: $13.5 Billion Website: sktelecom.com |
| TBM Service Group | · Oct 29, 2025 | Industry: Business Services Revenue: $354.9 Million Website: tbmservicegroup.com |
| PF / PS | · Oct 29, 2025 | Industry: Technology Revenue: Undisclosed Website: Not provided |
| Limocar by Transdev.ca | · Oct 26, 2025 | Industry: Transport Revenue: $33.1 Million Website: limocar.ca |
| Desjardin Bank / Group | · Oct 17, 2025 | Industry: Desjardin Bank Revenue: $13.7 Billion Website: desjardins.com |
| ChampionX | · Oct 15, 2025 | Industry: Industrial Machinery & Equipment Revenue: $3.6 Billion Website: championx.com |
| Schedler-translog | · Oct 14, 2025 | Industry: Logistics Revenue: $30 Million Website: schedler-translog.de |
| Borrowell.com | · Oct 13, 2025 | Industry: Financial Services Revenue: $25 Million Website: Borrowell.com |
| Legal Boutique | · Oct 13, 2025 | Industry: Legal Services Revenue: Undisclosed Website: TBD |
| Canias ERP | · Oct 13, 2025 | Industry: Enterprise Resource Planning Revenue: $26.7 Million Website: canias.com |
| Carewell | · Oct 13, 2025 | Industry: Medical Services Revenue: Undisclosed Website: Not provided |
| PLC-Transportation | · Oct 13, 2025 | Industry: Transportation Revenue: $30.7 Million Website: plc-trans.com |
| dsv.com | · Oct 13, 2025 | Industry: Logistics Revenue: $26.9 Billion Website: dsv.com |
| Kuehne + Nagel | · Oct 13, 2025 | Industry: $31 Billion Revenue: Logistics Website: kuehne-nagel.com |
| The L B | · Sep 30, 2025 | Industry: Legal Services Revenue: TBD Website: ??? |
| C Well | · Sep 30, 2025 | Industry: Medical Services Revenue: ??? Website: ???? |
| BAM | · Sep 28, 2025 | Industry: TBD Revenue: ??? Website: ??? |
| BW-RF | · Sep 28, 2025 | Industry: Financial Services Revenue: $50m Website: Not provided |
| SK Telecom | · Sep 16, 2025 | South Koreas largest wireless carrier offering mobile services broadband IPTV and cutting-edge AI and IoT solutions |
| Desjardins Banking/Group | · Sep 16, 2025 | Desjardins founded the Caisses Populaires Desjardins (Desjardins Group). First headquartered in Levis, the group grew to become the largest association of credit unions in North America. Today, Desjardins Group has headquarters in Montreal and is headed by Mr. Monique Leroux, President and Chief Executive Officer, who is leading a team of over forty thousand devoted officials. They serve clients in Canada and around the world. The group maintains a network of 536 local branches and has more than |
| AdScale | · Sep 16, 2025 | AdScale is an AI-driven advertising platform tailored for e‑commerce and digital marketers, offering unified campaign management across Google Search, Google Shopping, Display, Facebook, Instagram, and more. Its key solutions include an AI Campaign Builder, automated ad creation and optimization (including ad copy via ChatGPT), smart audience segmentation, BI analytics, and even SMS/email marketing tools. AdScale streamlines multichannel ad campaigns, optimizing bids and budgets in real time to |
| Dreyfuss Williams & Associates Co , LPA | · Sep 16, 2025 | Dreyfuss Williams Attorneys & Counselors at Law is a law firm specializing in Health Care Law, offering legal representation to hospitals and medical providers on Third Party Claim Reimbursement Issues. Their services include handling various matters such as ERISA, government payer disputes, health insurance, and managed care. The firm operates in Ohio and aims to be a solution for hospitals regarding claim resolutions. Their intended clients primarily comprise hospitals and medical service prov |
| Focus R Technologies Pvt | · Sep 16, 2025 | Focus R Technologies is a leading technology consulting firm that specializes in delivering tailored software solutions and IT services to help businesses achieve digital transformation. With a focus on innovation and operational efficiency, FocusR Technologies provides a comprehensive suite of services, including custom software development, system integration, cloud solutions, and data analytics. The firm partners with clients across diverse industries—such as healthcare, finance, retail, and |
| NTT Data/Vectorform | · Sep 16, 2025 | NTT Data is a global IT services provider based in Japan, delivering innovative solutions across a variety of industries including finance, healthcare, manufacturing, and public services. As a subsidiary of the NTT Group, NTT Data focuses on digital transformation, offering services such as cloud computing, AI, IoT, cybersecurity, and system integration. The company is recognized for helping clients improve operational efficiency and accelerate business growth through advanced technology solutio |
| Wakefield & Associates | · Sep 16, 2025 | Wakefield & Associates is a financial services company specializing in debt collection and billing services. Wakefield & Associates helps clients improve cash flow and reduce financial risk through efficient, effective debt recovery strategies. |
| Plug Power | · Sep 15, 2025 | Plug Power is a premier provider of innovative hydrogen fuel cell solutions, specializing in clean energy technologies that enable the transition to sustainable power systems. The company designs, manufactures, and delivers advanced fuel cell systems for a range of applications, including material handling, transportation, and stationary power generation. With a strong commitment to reducing carbon emissions and enhancing energy efficiency, Plug Power is positioned at the forefront of the green |
| Volt | · Sep 15, 2025 | Volt is a global talent solutions provider, specializing in workforce management, recruitment, and staffing across industries such as technology, engineering, healthcare, and finance. Their core offerings include Volt Workforce Solutions, Volt Talent Communities, and Volt Engineering & IT Solutions, designed to deliver tailored staffing solutions, streamline recruitment processes, and connect businesses with highly skilled professionals for both temporary and permanent roles. Volt is committed t |
| Ceva Logistics | · Sep 15, 2025 | CEVA Logistics is a global asset-light supply chain management company. It designs and implements freight forwarding, contract logistics, transportation management, and distribution management solutions for large and medium-size national and multinational companies. |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .