Suspect in Coinbase Hack has kept data for more than 10,000 customers on his phone, according to the judicial file

In May, Coinbase revealed that the pirates had succeeded with the personal data of thousands of customers, which the criminals used to encourage customers to put their crypto. While hacking, which, according to Coinbase, will cost it up to $ 400 million, stems from thug employees in an outsourcing company in India, the greatest exchange of crypto in the United States has offered little details that was specifically responsible. Now, a new judicial file provides a more in -depth examination on a suspect and how she helped to carry out the violation, which is the worst in the history of Coinbase.
According to a modified complaint filed Tuesday by the law firm of the current action Greenbaum Olbrantz, hacking is linked to Ashita Mishra, a Taskus employee, a listed company based in Texas which subcontracts the support of customer service for large technological companies in cheap labor markets. Mishra has worked in a Taskus service center in Indore, India.
In September 2024, she began stealing data with confidential customers, including social security numbers and bank account information, alleged the trial. Mishra has agreed to sell information to the pirates, who used it to pretend to be Coinbase employees and attract victims to give their crypto.
From September to January, Mishra and another accomplice recruited other Taskus employees to steal information on customers in a “sophisticated conspiracy of pavilion and radius that channeled data from Coinbase Coinbase Taskus to criminals”, according to the putative claims of the class. Even team leaders and operations leaders were accomplices, according to the complaint, citing a former Taskus employee.
When Taskus was finally wise to the violation, Mishra’s phone contained data for more than 10,000 Coinbase customers. She and others who were part of the plot received $ 200 a photo, according to the complaint. Sometimes Mishra took up to 200 photos of Coinbase customer accounts per day. More than 69,000 customers have been affected, said Coinbase in regulatory documents.
The brains behind the corruption program seem to be adolescents and twenty years which are part of a loose collective of criminal pirates called “comm”, ” Fortune previously reported.
The allegation that data flights started in September 2024 has been significant since Coinbase previously said that the date on which the violation occurred was at the end of December.
In another notable development, Taskus said this month that Coinbase employees, not just outside the sellers, were involved in the hack, but that the external did not develop more.
Coinbase and Taskus did not immediately respond to requests for comments on the modified complaint. Fortune could not immediately find the contact details of Ashita Mishra.
“We grant the highest priority on the safeguard of data from our customers and their customers and continue to strengthen our world security protocols and our training programs,” said a Taskus spokesman Fortune.
“We have informed affected users and regulators, cut the links with the staff of Taskus involved and other foreign agents, and tightened the checks,” said a spokesperson for Coinbase in a previous statement on hacking.
‘Concealment diagram’
The story described in the complaint is the most detailed account of one of the greatest crypto hacks of the year and the biggest violation that Coinbase has revealed in its history more than decade.
The other lawyers of the complainants continued the exchange of crypto for the hack. Coinbase pushed these prosecution to enter the arbitration, which is a process that has historically helped companies mitigate financial damage and unfavorable advertising.
This probably explains in part why the collective appeal company has chosen to continue the maintenance of Coinbase, Taskus, rather than continuing the Crypto company directly.
As part of its complaint, the law firm alleys that Taskus “took measures to silence those who know the violation”. In January, the external dismissed 226 staff members working in Indore, Fortune previously reported. The company took the extreme measurement because the conspiracy had “so infiltrated Taskus systems omnipresent that Taskus could not identify all the people involved”, alleges the complaint, citing a former employee of the external.
And, on February 10, Taskus decided to dismiss the human resources team he had gathered to investigate the violation, in what the affirmed trial was a “concealment model”.
The new deposit of the Greenbaum Olbrantz court changed a previous complaint filed in May, about two weeks after Coinbase revealed the hacking. The company previously brought high -level disputes, including a trial which alleges that the airlines have sold customer window seats, only for sitting them next to the walls without windows.
Coinbase tried to include the trial in consolidation of all complaints related to the pirat for the exchange of crypto. Taskus moved both to reject the trial and block the inclusion of the case in the greater consolidated complaint.
“Our modified complaint provides unprecedented accounting of how this data violation took place and we will continue to work on the holding of all responsible parties,” Carter Greenbaum, co -founder of Greenbaum Olbrantz, in a press release.
https://fortune.com/img-assets/wp-content/uploads/2025/09/GettyImages-1247584215.jpg?resize=1200,600