Instead of paying the $20 million ransom, Coinbase offered the same amount of money for information leading to the attackers.

Coinbase said customer passwords and private keys were protected by its systems, and “at no time were any of the targeted contractors or employees able to access customer funds.”

On Thursday, Coinbase confirmed that their systems were breached by unauthorized users and that internal company documents along with customers' personal data were accessed. The company was made aware of the breach via an email from the threat actor on May 11.