Coinbase Cartel
Coinbase Cartel is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.
213tracked breaches
5linked methods
Methods used
Ransomware 213Data Extortion & Leaks 213Misconfiguration & Exposed Data 22Supply-Chain Attack 1Credential & Infostealer Leaks 1
Breaches linked to Coinbase Cartel
September 15, 2025HIGH
September 15, 2025HIGH
September 15, 2025HIGH
September 15, 2025HIGH
September 15, 2025HIGH
August 25, 2025HIGH
August 25, 2025HIGH
April 19, 2025HIGH
January 17, 2025HIGH
September 11, 2024HIGH
November 27, 2023HIGH
November 20, 2023HIGH
May 26, 2023HIGH
Focus R Technologies Pvt Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
NTT Data/Vectorform Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Ceva Logistics Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
[Removed] #1534 Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Plug Power Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Marlborough Partners Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Marlborough Partners - 1 TB data Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
SK-Telecom - Data reuploaded Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Wakefield & Associates Listed by Coinbase Cartel Ransomware Group
Coinbase CartelAkira Ransomware
Clatronic International Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Staples Listed by Coinbase Cartel Ransomware Group
Coinbase CartelSiegedsec Ransomware
Dreyfuss Williams & Associates CO LPA Listed by Coinbase Cartel Ransomware Group
Coinbase CartelKnight Ransomware
Volt Listed by Coinbase Cartel Ransomware Group
Coinbase CartelRoyal Ransomware
Were you caught in one of these?
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.